Sanction RGPD Spanish Data Protection Authority (aepd) — CaixaBank, S.A. : 25 k€ (2023)
- Autorité de contrôle
- Spanish Data Protection Authority (aepd)
- Pays
- Espagne
- Entreprise / secteur
- CaixaBank, S.A.
- Montant de l'amende
- 25 k€
- Date de la décision
- 4 juillet 2023
- Fondement juridique
- Art. 32 (1)
- Manquement
- Mesures techniques et organisationnelles insuffisantes
Résumé des faits
The Spanish DPA has imposed a fine of EUR 25,000 on CaixaBank, S.A.. An individual had filed a complaint with the DPA due to the fact that when they requested information from the controller, they received information from a third party and not the requested information. The DPA found that the controller had failed to implement adequate technical and organizational measures to protect personal data.