Spain

Electrotecnica Bastida S.L.

3,000 €

GDPR enforcement action by Spanish Data Protection Authority (aepd) on 2021-04-05.

Rank · Sector

#374

of 608 in Industry and Commerce

Rank · Spain

#613

of 1,079

Rank · All fines

#2,055

of 3,085

Case details

Authority: Spanish Data Protection Authority (aepd)
Date: 2021-04-05
Controller / Processor: Electrotecnica Bastida S.L.
Sector: Industry and Commerce
Quoted Articles: Art. 32 (1) GDPR
Type of violation: Insufficient technical and organisational measures to ensure information security

Summary

The Spanish DPA (AEPD) has fined Electrotecnica Bastida S.L. EUR 3,000. Police officers had found 29 envelopes addressed to the controllers' respective employees on a vacant lot in the local industrial area. Two envelopes had already been opened. The envelopes contained results of medical examinations. The AEPD considered this to be a breach of the controller's duty to implement adequate technical and organizational measures to protect the processing of personal data.

Open original source Links to the regulator's original publication or another source.