# Transport Workers' Union of Aragon: Non-compliance with general data processing principles

- Type: Enforcement
- Source: Spanish Data Protection Authority (aepd)
- Date: 2023-01-03
- Original: https://www.enforcementtracker.com/ETid-1549
- Canonical: https://overview.legal/posts/47664
- Topics: IP Address, Security, Personal Data, Processing Agreement, Privacy by Design & Default, Processing, Supervisory Authorities

## Summary

The Spanish DPA has fined the Transport Workers' Union of Aragon EUR 3,000. The union had published a document with personal data (surname, first name and identity card number) of members of the strike committee on various social networks. During its investigation, the DPA found that the incident may have occurred due to the union's failure to implement sufficient technical and organizational measures to protect personal data.

## Full text

The Spanish DPA has fined the Transport Workers' Union of Aragon EUR 3,000. The union had published a document with personal data (surname, first name and identity card number) of members of the strike committee on various social networks. During its investigation, the DPA found that the incident may have occurred due to the union's failure to implement sufficient technical and organizational measures to protect personal data.

GDPR Articles: Art. 5 (1) f) GDPR, Art. 32 GDPR
Industry: Individuals and Private Associations

---
Generated by overview.legal · https://overview.legal/posts/47664 · 2026-08-22