# NOVATES ALIMENTACIÓN MADRID, S.L.: Insufficient technical and organisational measures to ensure information security

- Type: Enforcement
- Source: Spanish Data Protection Authority (aepd)
- Date: 2025-04-22
- Original: https://www.enforcementtracker.com/ETid-2626
- Canonical: https://overview.legal/posts/48741
- Topics: Security, Video Surveillance, Monitoring, Controllers, Privacy by Design & Default, Processing Agreement, Supervisory Authorities, Data Controller

## Summary

The Spanish DPA imposed a fine on NOVATES ALIMENTACIÓN MADRID, S.L. The controller used surveillance cameras without implementing the necessary technical and organizational measures to ensure data security. The original fine of EUR 20,000 was reduced to EUR 12,000 due to immediate payment and admission of responsibility by the controller.

## Full text

The Spanish DPA imposed a fine on NOVATES ALIMENTACIÓN MADRID, S.L. The controller used surveillance cameras without implementing the necessary technical and organizational measures to ensure data security. The original fine of EUR 20,000 was reduced to EUR 12,000 due to immediate payment and admission of responsibility by the controller.

GDPR Articles: Art. 32 GDPR
Industry: Industry and Commerce

---
Generated by overview.legal · https://overview.legal/posts/48741 · 2026-08-22