Enforcement
EN INDECEMI, S.L.: Non-compliance with general data processing principles
€3,000 fine - Spanish Data Protection Authority (aepd)
Content
The Spanish DPA has imposed a fine of EUR 3,000 on INDECEMI, S.L.. A person had filed a complaint with the DPA against the controller after receiving an email from the controller containing personal data (first name, last name, address, telephone number, etc.) of another person in the context of a complaint. The DPA considered this to be a violation of the principle of integrity and confidentiality.
GDPR Articles: Art. 5 (1) f) GDPR
Industry: Industry and Commerce