Spain

LIGA NACIONAL DE FÚTBOL PROFESIONAL

1,000,000 €

GDPR enforcement action by Spanish Data Protection Authority (aepd) on 2024-12-20.

Rank · Sector

of 351 in Individuals and Private Associations

Rank · Spain

#31

of 1,071

Rank · All fines

#172

of 3,042

Case details

Authority: Spanish Data Protection Authority (aepd)
Date: 2024-12-20
Controller / Processor: LIGA NACIONAL DE FÚTBOL PROFESIONAL
Sector: Individuals and Private Associations
Quoted Articles: Art. 35 GDPR
Type of violation: Insufficient technical and organisational measures to ensure information security

Summary

The Spanish DPA has imposed a fine of EUR 1 million on LIGA NACIONAL DE FÚTBOL PROFESIONAL. The controller had introduced access controls for visitors to football stadiums using biometric systems without first carrying out the necessary data protection impact assessment.

Open original source Links to the regulator's original publication or another source.