# FLEXICAR INTERNACIONAL, S.L.: Insufficient technical and organisational measures to ensure information security

- Type: Enforcement
- Source: Spanish Data Protection Authority (aepd)
- Date: 2026-07-28
- Original: https://www.enforcementtracker.com/ETid-3363
- Canonical: https://overview.legal/posts/603878
- Topics: Supervisory Authorities

## Summary

The Spanish Data Protection Authority (AEPD) fined FLEXICAR INTERNACIONAL, S.L. €680,000 for failing to implement sufficient technical and organizational measures to ensure information security, violating GDPR Articles 5(1)(f), 13, and 32. The enforcement action, initiated on July 28, 2026, concerns deficiencies in the company's data protection practices within the industry and commerce sector.

## Full text

Spanish Data Protection Authority (aepd) fined FLEXICAR INTERNACIONAL, S.L. €680,000 on 2026-07-28 for: Insufficient technical and organisational measures to ensure information security.
GDPR Articles: Art. 5 (1) f) GDPR, Art. 13 GDPR, Art. 32 GDPR
Sector: Industry and Commerce
Country: Spain
Source: https://www.aepd.es/documento/ps-00540-2025.pdf

---
Generated by overview.legal · https://overview.legal/posts/603878 · 2026-10-24