Spain

Club Náutico el Estacio

3,000 €

GDPR enforcement action by Spanish Data Protection Authority (aepd) on 2021-08-02.

Rank · Sector

#99

of 351 in Individuals and Private Associations

Rank · Spain

#614

of 1,071

Rank · All fines

#2,032

of 3,042

Case details

Authority: Spanish Data Protection Authority (aepd)
Date: 2021-08-02
Controller / Processor: Club Náutico el Estacio
Sector: Individuals and Private Associations
Quoted Articles: Art. 32 GDPR
Type of violation: Insufficient technical and organisational measures to ensure information security

Summary

The Spanish DPA (AEPD) has imposed a fine of EUR 3,000 on Club Náutico el Estacio. A data subject filed a complaint against the controller with the AEPD. The complaint is based on the fact that the controller has published the announcement and the record of the club's ordinary meeting on its website, disclosing personal data without access restrictions.

Open original source Links to the regulator's original publication or another source.