Spain

RCL CRUISES LTD

15,000 €

GDPR enforcement action by Spanish Data Protection Authority (aepd) on 2023-07-07.

Rank · Sector

#21

of 100 in Accomodation and Hospitality

Rank · Spain

#365

of 1,075

Rank · All fines

#1,201

of 3,050

Case details

Authority: Spanish Data Protection Authority (aepd)
Date: 2023-07-07
Controller / Processor: RCL CRUISES LTD
Sector: Accomodation and Hospitality
Quoted Articles: Art. 5 (1) f) GDPR, Art. 32 GDPR
Type of violation: Non-compliance with general data processing principles

Summary

The Spanish DPA has imposed a fine of EUR 15,000 on RCL CRUISES LTD. An individual had filed a complaint with the DPA. The individual, after requesting information about a cruise ship by e-mail, had received an e-mail from the controller containing personal data of another individual. The DPA found that the controller had failed to implement appropriate technical and organizational measures to protect personal data.

Open original source Links to the regulator's original publication or another source.