Spain

SERVICIOS ESPECIALES, S.A.

120,000 €

GDPR enforcement action by Spanish Data Protection Authority (aepd) on 2025-03-28.

Rank · Sector

#21

of 213 in Employment

Rank · Spain

#95

of 1,075

Rank · All fines

#441

of 3,050

Case details

Authority: Spanish Data Protection Authority (aepd)
Date: 2025-03-28
Controller / Processor: SERVICIOS ESPECIALES, S.A.
Sector: Employment
Quoted Articles: Art. 5 (1) f) GDPR
Type of violation: Non-compliance with general data processing principles

Summary

The Spanish DPA imposed a fine on SERVICIOS ESPECIALES, S.A. The case concerned a GDPR breach during an internal workplace conflict investigation: the company shared a report via email that included the full names, roles, and complaint details of the individuals involved, to the Works Committee and 15 additional employees. The DPA found this disclosure violated Article 5 (1) f) GDPR, as it failed to ensure the confidentiality of personal data. The original fine of EUR 200,000 was reduced to EUR 120,000 due to voluntary payment and acknowledgment of responsibility.

Open original source Links to the regulator's original publication or another source.