Sanction RGPD Spanish Data Protection Authority (aepd) — Transport Workers' Union of Aragon : 3 k€ (2023)

Autorité de contrôle
Spanish Data Protection Authority (aepd)
Pays
Espagne
Entreprise / secteur
Transport Workers' Union of Aragon
Montant de l'amende
3 k€
Date de la décision
3 janvier 2023
Fondement juridique
Art. 5 (1) f), Art. 32
Manquement
Non-respect des principes de traitement

Résumé des faits

The Spanish DPA has fined the Transport Workers' Union of Aragon EUR 3,000. The union had published a document with personal data (surname, first name and identity card number) of members of the strike committee on various social networks. During its investigation, the DPA found that the incident may have occurred due to the union's failure to implement sufficient technical and organizational measures to protect personal data.

Décision officielle

Spanish Data Protection Authority (aepd)

Évaluer votre conformité RGPD avec Data Comply One