# UNITED PARCEL SERVICE ESPAÑA LTD Y COMPAÑIA SRC: Non-compliance with general data processing principles

- Type: Enforcement
- Source: Spanish Data Protection Authority (aepd)
- Date: 2022-11-03
- Original: https://www.enforcementtracker.com/ETid-1487
- Canonical: https://overview.legal/posts/47602
- Topics: Integrity and Confidentiality Principle, Security, IP Address, Professional Secrecy, Personal Data, Processing Agreement, Privacy by Design & Default, Processing, Consent, Supervisory Authorities

## Summary

The Spanish DPA has imposed a fine of EUR 70,000 on UNITED PARCEL SERVICE ESPAÑA LTD Y COMPAÑIA SRC (UPS). A person had filed a complaint with the DPA because UPS had delivered a package from them to a neighbor without their consent. The DPA considered this to be an unauthorized disclosure of their data, which was a result of a lack of technical and organizational measures for personal data protection. The DPA also found that this unauthorized disclosure of personal data constituted a violation

## Full text

The Spanish DPA has imposed a fine of EUR 70,000 on UNITED PARCEL SERVICE ESPAÑA LTD Y COMPAÑIA SRC (UPS). A person had filed a complaint with the DPA because UPS had delivered a package from them to a neighbor without their consent. The DPA considered this to be an unauthorized disclosure of their data, which was a result of a lack of technical and organizational measures for personal data protection. The DPA also found that this unauthorized disclosure of personal data constituted a violation of the principle of integrity and confidentiality.

GDPR Articles: Art. 5 (1) f) GDPR, Art. 32 GDPR
Industry: Transportation and Energy

---
Generated by overview.legal · https://overview.legal/posts/47602 · 2026-08-22