Sanction RGPD Spanish Data Protection Authority (aepd) — SERVICIOS FINANCIEROS CARREFOUR, E.F.C. : 1,5 M€ (2025)
- Autorité de contrôle
- Spanish Data Protection Authority (aepd)
- Pays
- Espagne
- Entreprise / secteur
- SERVICIOS FINANCIEROS CARREFOUR, E.F.C.
- Montant de l'amende
- 1,5 M€
- Date de la décision
- 17 septembre 2025
- Fondement juridique
- Art. 5 (1) f)
- Manquement
- Mesures techniques et organisationnelles insuffisantes
Résumé des faits
The Spanish DPA has imposed a fine of EUR 1,500,000 on SERVICIOS FINANCIEROS CARREFOUR, E.F.C. The controller suffered a successfull cyberattack due to insufficient technical and organisational measures. The original fine of EUR 2,500,000 was reduced to EUR 1,500,000 due to immediate payment and admission of responsibility by the controller.