Enforcement
EN Electrotecnica Bastida S.L.: Insufficient technical and organisational measures to ensure information security
€3,000 fine - Spanish Data Protection Authority (aepd)
Content
The Spanish DPA (AEPD) has fined Electrotecnica Bastida S.L. EUR 3,000. Police officers had found 29 envelopes addressed to the controllers' respective employees on a vacant lot in the local industrial area. Two envelopes had already been opened. The envelopes contained results of medical examinations. The AEPD considered this to be a breach of the controller's duty to implement adequate technical and organizational measures to protect the processing of personal data.
GDPR Articles: Art. 32 (1) GDPR
Industry: Industry and Commerce