Sanction RGPD Spanish Data Protection Authority (aepd) — Federation of Sports for People with Intellectual Disabilities of Castilla la Mancha-FECAM : 4 k€ (2022)
- Autorité de contrôle
- Spanish Data Protection Authority (aepd)
- Pays
- Espagne
- Entreprise / secteur
- Federation of Sports for People with Intellectual Disabilities of Castilla la Mancha-FECAM
- Montant de l'amende
- 4 k€
- Date de la décision
- 2 décembre 2022
- Fondement juridique
- Art. 9 (2) a), Art. 13
- Manquement
- Base légale insuffisante pour le traitement
Résumé des faits
The Spanish DPA has fined the Federation of Sports for People with Intellectual Disabilities of Castilla la Mancha-FECAM. The controller processed medical data from Covid-19 antigen tests of participants in sports competitions without their consent to the processing. In addition, the DPA found that the controller failed to inform the data subjects of the data retention period. The original fine of EUR 6,000 was reduced to EUR 3,600 due to voluntary payment and admission of responsibility.