Skip to content
Enforcement · Spanish Data Protection Authority (aepd) EN LLM context A cited markdown file you can paste into your AI assistant (ChatGPT, Claude, a RAG or project knowledge base) to ground it in this document. Contains: this document’s text, its sections with their topics, and the full text of every law provision it applies. Everything links back to its source on overview.legal — legal information, not advice.

VALORA PREVENCIÓN, S.L.U.: Insufficient technical and organisational measures to ensure information security

€32,000 Fine
VALORA PREVENCIÓN, S.L.U.
SPAIN
Art. 5 GDPR Art. 32 GDPR

How it connects

Full text

The Spanish DPA has imposed a fine of EUR 32,000 on VALORA PREVENCIÓN, S.L.U. The controller, a company offering occupational health and safety services, failed to implement sufficient technical and organisational measures. This resulted in the health data of an employee being leaked to a coworker of the data subject. The original fine of EUR 40,000 was reduced to EUR 32,000 due to immediate payment by the controller.

Industry: Industry and Commerce

Similar Content