Enforcement
EN VALORA PREVENCIÓN, S.L.U.: Insufficient technical and organisational measures to ensure information security
€32,000 fine - Spanish Data Protection Authority (aepd)
Content
The Spanish DPA has imposed a fine of EUR 32,000 on VALORA PREVENCIÓN, S.L.U. The controller, a company offering occupational health and safety services, failed to implement sufficient technical and organisational measures. This resulted in the health data of an employee being leaked to a coworker of the data subject. The original fine of EUR 40,000 was reduced to EUR 32,000 due to immediate payment by the controller.
GDPR Articles: Art. 5 (1) f) GDPR, Art. 32 GDPR
Industry: Industry and Commerce