Enforcement
EN EXCEL HOTELS & RESORTS, S.A.: Insufficient technical and organisational measures to ensure information security
€32,000 fine - Spanish Data Protection Authority (aepd)
Content
The Spanish DPA has imposed a fine of EUR 32,000 on EXCEL HOTELS & RESORTS, S.A. The controller used guards to control access to its facility. The guards regularly left documents containing personal data in their post, making them accessible to third parties. The original fine of EUR 40,000 was reduced to EUR 32,000 due to immediate payment.
GDPR Articles: Art. 5 (1) f) GDPR
Industry: Accomodation and Hospitality