Details:

Summary The Spanish DPA has imposed a fine on ALBEN AIRPORT FACILITIES S.L.. The controller had sent an email with certificates of participation in a training course to all participants, thus disclosing the participants’ data, including names, surnames and ID card numbers, to all participants in the training. The original fine of EUR 2,500 was reduced to EUR 1,500 due to voluntary payment and admission of responsibility.
Link: link
Related articles:  Art. 5 (1) f) GDPR, Art. 32 GDPR
Type: Non-compliance with general data processing principles
Fine: EUR 1,500
Sector Public Sector and Education

 

All data is based on The CMS’s Law GDPR Enforcement Tracker Source: https://www.enforcementtracker.com/

Tags: case law