# FREE TECHNOLOGIES EXCOM, S.L.: Insufficient technical and organisational measures to ensure information security

- Type: Enforcement
- Source: Spanish Data Protection Authority (aepd)
- Date: 2026-02-03
- Original: https://www.enforcementtracker.com/ETid-3055
- Canonical: https://overview.legal/posts/52409
- Topics: Encryption, Integrity and Confidentiality Principle, Security, Telecommunications, Controllers, Processing Agreement, Supervisory Authorities, Data Controller

## Summary

The Spanish DPA has imposed a fine of EUR 10,000 on FREE TECHNOLOGIES EXCOM, S.L. The controller had reset user passwords and communicated the new passwords to the clients via email. However, the email was not encrypted and did not implement any other appropriate security measures.

## Full text

The Spanish DPA has imposed a fine of EUR 10,000 on FREE TECHNOLOGIES EXCOM, S.L. The controller had reset user passwords and communicated the new passwords to the clients via email. However, the email was not encrypted and did not implement any other appropriate security measures.

GDPR Articles: Art. 32 GDPR
Industry: Media, Telecoms and Broadcasting

---
Generated by overview.legal · https://overview.legal/posts/52409 · 2026-08-22