Sanction RGPD Spanish Data Protection Authority (aepd) — UNIQLO EUROPE, LTD, SUCURSAL EN ESPAÑA : 270 k€ (2024)
- Autorité de contrôle
- Spanish Data Protection Authority (aepd)
- Pays
- Espagne
- Entreprise / secteur
- UNIQLO EUROPE, LTD, SUCURSAL EN ESPAÑA
- Montant de l'amende
- 270 k€
- Date de la décision
- 12 août 2024
- Fondement juridique
- Art. 5 (1) f), Art. 32
- Manquement
- Non-respect des principes de traitement
Résumé des faits
The Spanish DPA has imposed a fine on UNIQLO EUROPE, LTD, SUCURSAL EN ESPAÑA. An individual who provided services to the controller filed a complaint with the DPA due to the fact that, after requesting their payslip, they received a document containing their payslip and those of 446 employees. The document revealed data such as name, surname and bank account number of the data subjects. During its investigation, the DPA found that the controller failed to implement appropriate technical and organizational measures to protect personal data in order to prevent such an incident. The original fine of EUR 450,000 was reduced to EUR 270,000 due to immediate payment and admission of responsibility.