Enforcement · Spanish Data Protection Authority (aepd) EN LLM context A cited markdown file you can paste into your AI assistant (ChatGPT, Claude, a RAG or project knowledge base) to ground it in this document. Contains: this document’s text, its sections with their topics, and the full text of every law provision it applies. Everything links back to its source on overview.legal — legal information, not advice.
SINDICATO LIBRE DE TRANSPORTES: Insufficient technical and organisational measures to ensure information security
How it connects
Related across sources
Case Law Deutsche Wohnen SE v Staatsanwaltschaft Berlin Guidance Guidelines 07/2022 on certification as a tool for transfers News Garante onderzoekt het gebruik van "cookie walls". News De Deense beschermingsautoriteit (SA) heeft verklaard dat het gebruik van Google Analytics onrechtmatig is zonder aanvullende maatregelen. News Danish SA Declares Use of Google Analytics Unlawful Without Supplementary Measures Guidance Guidelines 07/2020 on the concepts of controller and processor in the GDPR
Full text
The Spanish DPA has imposed a fine on SINDICATO LIBRE DE TRANSPORTES. A member of the union had shared the data subject's payslip in a WhatsApp group without the data subject's consent. This revealed data such as their identity card number and social security number. The original fine of EUR 5,000 was reduced to EUR 2,000 due to voluntary payment and acknowledgement of responsibility.
Industry: Individuals and Private Associations
Original document at the source www.aepd.es