Sanction RGPD Spanish Data Protection Authority (aepd) — HISPAPOST, S.A. : 36 k€ (2024)
- Autorité de contrôle
- Spanish Data Protection Authority (aepd)
- Pays
- Espagne
- Entreprise / secteur
- HISPAPOST, S.A.
- Montant de l'amende
- 36 k€
- Date de la décision
- 1 février 2024
- Fondement juridique
- Art. 28 (3)
- Manquement
- Manquement à la notification de violation de données
Résumé des faits
The Spanish DPA has imposed a fine on HISPAPOST, S.A.. The police had found over a thousand abandoned letters containing the Hispapost logo. Hispapost had been contracted by several companies to deliver the letters. During its investigation, the DPA found that Hispapost, as a processor, had failed to report the data protection incident to the data controllers in a timely manner. The original fine of EUR 60,000 was reduced to EUR 36,000 due to admission of responsibility and voluntary payment.