# PRESTAMER, S.L.: Insufficient technical and organisational measures to ensure information security

- Type: Enforcement
- Source: Spanish Data Protection Authority (aepd)
- Date: 2024-04-12
- Original: https://www.enforcementtracker.com/ETid-2285
- Canonical: https://overview.legal/posts/48400
- Topics: IP Address, Security, Insurance, Controllers, Processing Agreement, Supervisory Authorities, Law Enforcement, Data Controller

## Summary

The Spanish DPA has imposed a fine on PRESTAMER, S.L.. The controller had sent an e-mail without using the blind copy option, revealing the email addresses of all recipients to the other recipients. The original fine of EUR 3,000 was reduced to EUR 1,800 due to voluntary payment and acknowledgement of responsibility.

## Full text

The Spanish DPA has imposed a fine on PRESTAMER, S.L.. The controller had sent an e-mail without using the blind copy option, revealing the email addresses of all recipients to the other recipients. The original fine of EUR 3,000 was reduced to EUR 1,800 due to voluntary payment and acknowledgement of responsibility.

GDPR Articles: Art. 5 (1) f) GDPR, Art. 32 GDPR
Industry: Finance, Insurance and Consulting

---
Generated by overview.legal · https://overview.legal/posts/48400 · 2026-08-22