Spain

Transport Workers' Union of Aragon

3,000 €

GDPR enforcement action by Spanish Data Protection Authority (aepd) on 2023-01-03.

Rank · Sector

#106

of 351 in Individuals and Private Associations

Rank · Spain

#640

of 1,075

Rank · All fines

#2,078

of 3,050

Case details

Authority: Spanish Data Protection Authority (aepd)
Date: 2023-01-03
Controller / Processor: Transport Workers' Union of Aragon
Sector: Individuals and Private Associations
Quoted Articles: Art. 5 (1) f) GDPR, Art. 32 GDPR
Type of violation: Non-compliance with general data processing principles

Summary

The Spanish DPA has fined the Transport Workers' Union of Aragon EUR 3,000. The union had published a document with personal data (surname, first name and identity card number) of members of the strike committee on various social networks. During its investigation, the DPA found that the incident may have occurred due to the union's failure to implement sufficient technical and organizational measures to protect personal data.

Open original source Links to the regulator's original publication or another source.