Spain

Automoción

800 €

GDPR enforcement action by Spanish Data Protection Authority (aepd) on 2020-02-03.

Rank · Sector

#553

of 597 in Industry and Commerce

Rank · Spain

#874

of 1,075

Rank · All fines

#2,748

of 3,050

Case details

Authority: Spanish Data Protection Authority (aepd)
Date: 2020-02-03
Controller / Processor: Automoción
Sector: Industry and Commerce
Quoted Articles: Art. 5 GDPR, Art. 6 GDPR
Type of violation: Insufficient legal basis for data processing

Summary

An employee created a fake profile about a female colleague on an erotic portal, which contained, among other things, her contact details, a photo of her and information about her sexual nature. Based on the profile, the data subject received several phone calls from people who wanted to contact her regarding the information provided on the website. As the private person was found to have a personality disorder, the fine was reduced from initial EUR 1000 to EUR 800.

Open original source Links to the regulator's original publication or another source.