Sanction RGPD Spanish Data Protection Authority (aepd) — Basketball Federation of Castilla and Leon : 5 k€ (2020)
- Autorité de contrôle
- Spanish Data Protection Authority (aepd)
- Pays
- Espagne
- Entreprise / secteur
- Basketball Federation of Castilla and Leon
- Montant de l'amende
- 5 k€
- Date de la décision
- 28 août 2020
- Fondement juridique
- Art. 5, Art. 6
- Manquement
- Base légale insuffisante pour le traitement
Résumé des faits
The Basketball Association transmitted personal data to third parties, which were subsequently published on the Internet without consent of the data subjects. In addition, the data protection authority found that the Basketball Federation also disclosed personal data to a newspaper, violating - in addition - the principle of integrity and confidentiality (Art. 5 (1) f) GDPR).