Spain

Barcelona Airport Security Guard Association ('AVSAB')

3,000 €

GDPR enforcement action by Spanish Data Protection Authority (aepd) on 2020-09-07.

Rank · Sector

#155

of 213 in Employment

Rank · Spain

#599

of 1,075

Rank · All fines

#2,012

of 3,050

Case details

Authority: Spanish Data Protection Authority (aepd)
Date: 2020-09-07
Controller / Processor: Barcelona Airport Security Guard Association ('AVSAB')
Sector: Employment
Quoted Articles: Art. 5 (1) f) GDPR
Type of violation: Non-compliance with general data processing principles

Summary

A member of the AVSAB security committee used WhatsApp to send messages to private phone numbers containing personal information about employees. This was a violation of the confidentiality principle that, according to the AEPD, must be respected not only by the data controller, but also by any other subject involved in any phase of the processing.

Open original source Links to the regulator's original publication or another source.