Details:

Summary The Spanish DPA has imposed a fine on AXA REAL ESTATE INVESTMENT MANAGERS IBERICA S.A. y SEUR GEOPOST, S.L.. The controller had suffered a security incident which, according to the DPA, had occurred due to the company’s failure to implement appropriate technical and organizational measures to protect personal data. The original fine of EUR 100,000 was reduced to EUR 80,000 due to voluntary payment.
Link: link
Related articles:  Art. 32 GDPR
Type: Insufficient technical and organisational measures to ensure information security
Fine: EUR 80,000
Sector Real Estate

 

All data is based on The CMS’s Law GDPR Enforcement Tracker Source: https://www.enforcementtracker.com/

Tags: case law