Enforcement · Spanish Data Protection Authority (aepd) EN LLM context A cited markdown file you can paste into your AI assistant (ChatGPT, Claude, a RAG or project knowledge base) to ground it in this document. Contains: this document’s text, its sections with their topics, and the full text of every law provision it applies. Everything links back to its source on overview.legal — legal information, not advice.

FEDERACION DE COLUMBICULTURA DE CASTILLA-LA MANCHA: Insufficient technical and organisational measures to ensure information security

€600 Fine
FEDERACION DE COLUMBICULTURA DE CASTILLA-LA MANCHA
SPAIN
Art. 5 GDPR
Integrity and Confidentiality Principle Professional Secrecy Controllers Security Personal Data Processing Agreement Supervisory Authorities Data Controller
Apr 9, 2025 Source

How it connects

Related across sources

Guidance Guidelines 04/2021 on Codes of Conduct as tools for transfers EDPB Guidance Guidelines 07/2020 on the concepts of controller and processor in the GDPR EDPB Guidance Guidelines 2/2020 on articles 46 (2) (a) and 46 (3) (b) of Regulation 2016/679 for transfers of personal data between EEA and non-EEA public authorities and bodies EDPB Guidance Guidelines 4/2019 on Article 25 Data Protection by Design and by Default Version 2.0 Adopted on 20 October 2020 EDPB Case Law Digital Rights Ireland Ltd v Minister for Communications CJEU Case Law Supreme Court upholds €300,000 fine against INPS for GDPR violations in COVID bonus data Supreme Court

Full text

The Spanish DPA imposed a fine on FEDERACION DE COLUMBICULTURA DE CASTILLA-LA MANCHA. The controller was unable to ensure the confidentiality of personal data, which resulted in a leak. The original fine of EUR 1,000 was reduced to EUR 600 due to immediate payment and admission of responsibility by the controller.

Industry: Individuals and Private Associations

Original document at the source www.aepd.es

Similar Content