Enforcement
EN MAD COOL FESTIVAL S.L.: Insufficient technical and organisational measures to ensure information security
€3,500 fine - Spanish Data Protection Authority (aepd)
Content
The Spanish DPA (AEPD) has imposed a fine of EUR 3,500 on MAD COOL FESTIVAL S.L. The controller suffered a data breach due to insufficient technical and organizational measures. The total fine consists of a fine of EUR 2,000 for infringing on Art. 5(1)(f) GDPR, and EUR 1,500 for the violation of Art. 32 GDPR. The total sum can be reduced by 20% (resulting in a fine of EUR 2,800) with timely payment.
GDPR Articles: Art. 5 (1) f) GDPR, Art. 32 GDPR
Industry: Industry and Commerce