Enforcement
EN Private individual: Non-compliance with general data processing principles
€5,000 fine - Spanish Data Protection Authority (aepd)
Content
The Spanish DPA has imposed a fine of EUR 5,000 on a private individual. The controller sent an e-mail with personal data to several recipients in an open distribution list. This made it possible for the recipients to view the e-mail addresses of all other recipients.
GDPR Articles: Art. 5 (1) f) GDPR, Art. 32 (1) GDPR
Industry: Individuals and Private Associations