Spain

President of a workers' council

600 €

GDPR enforcement action by Spanish Data Protection Authority (aepd) on 2024-05-23.

Rank · Sector

#209

of 213 in Employment

Rank · Spain

#925

of 1,075

Rank · All fines

#2,813

of 3,050

Case details

Authority: Spanish Data Protection Authority (aepd)
Date: 2024-05-23
Controller / Processor: President of a workers' council
Sector: Employment
Quoted Articles: Art. 5 (1) f) GDPR
Type of violation: Non-compliance with general data processing principles

Summary

The Spanish DPA has imposed a fine on the president of the workers' council of a company following a complaint by a former employee. During their employment, the company carried out a collective redundancy procedure that affected the employee. The council had publicly posted a record of a meeting between the employee representatives and the works council, which contained a list of the employees affected with personal data such as names, ID card numbers, dates of birth, etc. The original fine of EUR 1,000 was reduced to EUR 600 upon admission of responsibility and voluntary payment.

Open original source Links to the regulator's original publication or another source.