# BIZUM, S.L.: Insufficient technical and organisational measures to ensure information security

- Type: Enforcement
- Source: Spanish Data Protection Authority (aepd)
- Date: 2025-08-11
- Original: https://www.enforcementtracker.com/ETid-2934
- Canonical: https://overview.legal/posts/49049
- Topics: Data Breaches, Security, Controllers, Insurance, Processing Agreement, Law Enforcement, Supervisory Authorities, Data Controller

## Summary

The Spanish DPA has imposed a fine of EUR 80,000 on BIZUM, S.L. The controller failed to implement sufficient technical and organisational measures to ensure data security, resulting in a data breach. The original fine of EUR 100,000 was reduced to EUR 80,000 due to admission of responsibility by the controller.

## Full text

The Spanish DPA has imposed a fine of EUR 80,000 on BIZUM, S.L. The controller failed to implement sufficient technical and organisational measures to ensure data security, resulting in a data breach. The original fine of EUR 100,000 was reduced to EUR 80,000 due to admission of responsibility by the controller.

GDPR Articles: Art. 32 GDPR
Industry: Finance, Insurance and Consulting

---
Generated by overview.legal · https://overview.legal/posts/49049 · 2026-08-22