Sanction RGPD Spanish Data Protection Authority (aepd) — Pharmacy owner : 10 k€ (2023)
- Autorité de contrôle
- Spanish Data Protection Authority (aepd)
- Pays
- Espagne
- Entreprise / secteur
- Pharmacy owner
- Montant de l'amende
- 10 k€
- Date de la décision
- 24 novembre 2023
- Fondement juridique
- Art. 5 (1) f), Art. 32
- Manquement
- Non-respect des principes de traitement
Résumé des faits
The Spanish DPA has imposed a fine of EUR 10,000 on a pharmacy owner. The controller had disposed of a large number of personal documents, including medical information of data subjects, in public trash containers that were accessible to other people.