Enforcement
EN CYNGASA, S.L.: Insufficient legal basis for data processing
€5,000 fine - Spanish Data Protection Authority (aepd)
Content
The Spanish DPA (AEPD) has imposed a fine of EUR 5,000 on CYNGASA, S.L.. The data subject, when requesting a work report, discovered that the controller had disclosed his personal data to a third party company without his consent. The data involved included among others first and last name as well as his social security number.
GDPR Articles: Art. 6 GDPR
Industry: Employment