Sanction RGPD Spanish Data Protection Authority (aepd) — Owner of a Law Firm : 600 € (2025)
- Autorité de contrôle
- Spanish Data Protection Authority (aepd)
- Pays
- Espagne
- Entreprise / secteur
- Owner of a Law Firm
- Montant de l'amende
- 600 €
- Date de la décision
- 3 avril 2025
- Fondement juridique
- Art. 5 (1) f)
- Manquement
- Mesures techniques et organisationnelles insuffisantes
Résumé des faits
The Spanish DPA imposed a fine on the owner of a law firm. The controller disclosed personal information in an external email because they did not implement sufficient technical and organizational measures. The original fine of EUR 1,000 was reduced to EUR 600 due to immediate payment and admission of responsibility by the controller.