Spain

Automoción

800 €

GDPR enforcement action by Spanish Data Protection Authority (aepd) on 2020-02-03.

Rank · Sector

#607

of 658 in Industry and Commerce

Rank · Spain

#926

of 1,134

Rank · All fines

#2,959

of 3,280

Case details

Authority: Spanish Data Protection Authority (aepd)
Date: 2020-02-03
Controller / Processor: Automoción
Sector: Industry and Commerce
Quoted Articles: Art. 5 GDPR, Art. 6 GDPR
Type of violation: Insufficient legal basis for data processing

Summary

An employee created a fake profile about a female colleague on an erotic portal, which contained, among other things, her contact details, a photo of her and information about her sexual nature. Based on the profile, the data subject received several phone calls from people who wanted to contact her regarding the information provided on the website. As the private person was found to have a personality disorder, the fine was reduced from initial EUR 1000 to EUR 800.

Open original source Links to the regulator's original publication or another source.