Enforcement
EN ALBERO FORTE COMPOSITE, S.L.: Insufficient technical and organisational measures to ensure information security
€12,000 fine - Spanish Data Protection Authority (aepd)
Content
The Spanish DPA (AEPD) has imposed a fine on ALBERO FORTE COMPOSITE, S.L.. The company had taken pictures of employees at the entrance for the purpose of recording their working hours. However, the company had failed to conduct a data protection impact assessment. The original fine of EUR 20,000 was reduced to EUR 12,000 due to voluntary payment and admission of responsibility.
GDPR Articles: Art. 35 GDPR
Industry: Employment