Enforcement
EN TNT EXPRESS WORLDWIDE SPAIN, S.L.: Non-compliance with general data processing principles
€10,000 fine - Spanish Data Protection Authority (aepd)
Content
The Spanish DPA (AEPD) has imposed a fine of EUR 10,000 on TNT EXPRESS WORLDWIDE SPAIN, S.L.. The data subject had placed a private order with the controller and had entered the address of his workplace as the delivery address. The delivery was correctly delivered, but the invoice was issued to the company where the data subject was employed and not to the data subject. Both the invoice and the delivery bill contained various personal data of the data subject. These were disclosed to his employer as a result of the incident.
GDPR Articles: Art. 5 (1) d) GDPR
Industry: Industry and Commerce