Sanction RGPD Spanish Data Protection Authority (aepd) — UNITED PARCEL SERVICE ESPAÑA LTD Y COMPAÑIA SRC : 70 k€ (2022)
- Autorité de contrôle
- Spanish Data Protection Authority (aepd)
- Pays
- Espagne
- Entreprise / secteur
- UNITED PARCEL SERVICE ESPAÑA LTD Y COMPAÑIA SRC
- Montant de l'amende
- 70 k€
- Date de la décision
- 3 novembre 2022
- Fondement juridique
- Art. 5 (1) f), Art. 32
- Manquement
- Non-respect des principes de traitement
Résumé des faits
The Spanish DPA has imposed a fine of EUR 70,000 on UNITED PARCEL SERVICE ESPAÑA LTD Y COMPAÑIA SRC (UPS). A person had filed a complaint with the DPA because UPS had delivered a package from them to a neighbor without their consent. The DPA considered this to be an unauthorized disclosure of their data, which was a result of a lack of technical and organizational measures for personal data protection. The DPA also found that this unauthorized disclosure of personal data constituted a violation of the principle of integrity and confidentiality.