# Pharmacy owner: Non-compliance with general data processing principles

- Type: Enforcement
- Source: Spanish Data Protection Authority (aepd)
- Date: 2023-11-24
- Original: https://www.enforcementtracker.com/ETid-2127
- Canonical: https://overview.legal/posts/48242
- Topics: Healthcare, Controllers, Healthcare, IP Address, Personal Data, Processing Agreement, Processing, Data Controller, Supervisory Authorities

## Summary

The Spanish DPA has imposed a fine of EUR 10,000 on a pharmacy owner. The controller had disposed of a large number of personal documents, including medical information of data subjects, in public trash containers that were accessible to other people.

## Full text

The Spanish DPA has imposed a fine of EUR 10,000 on a pharmacy owner. The controller had disposed of a large number of personal documents, including medical information of data subjects, in public trash containers that were accessible to other people.

GDPR Articles: Art. 5 (1) f) GDPR, Art. 32 GDPR
Industry: Health Care

---
Generated by overview.legal · https://overview.legal/posts/48242 · 2026-08-22