Spain

Company owner

2,000 €

GDPR enforcement action by Spanish Data Protection Authority (aepd) on 2021-08-23.

Rank · Sector

#423

of 597 in Industry and Commerce

Rank · Spain

#684

of 1,075

Rank · All fines

#2,270

of 3,050

Case details

Authority: Spanish Data Protection Authority (aepd)
Date: 2021-08-23
Controller / Processor: Company owner
Sector: Industry and Commerce
Quoted Articles: Art. 13 GDPR
Type of violation: Insufficient fulfilment of information obligations

Summary

The Spanish DPA (AEPD) has imposed a fine of EUR 2,000 on a company owner. A person had applied for a job at the controller's company and sent the controller his CV via WhatsApp. Thereby, he was neither informed about the processing of his personal data nor about his data subject rights. The AEPD considered this to be a violation of Art. 13 of the GDPR.

Open original source Links to the regulator's original publication or another source.