# ECG Médica, S.L.: Insufficient technical and organisational measures to ensure information security

- Type: Enforcement
- Source: Spanish Data Protection Authority (aepd)
- Date: 2026-07-15
- Original: https://www.enforcementtracker.com/ETid-3409
- Canonical: https://overview.legal/posts/607219
- Topics: Supervisory Authorities

## Full text

Spanish Data Protection Authority (aepd) fined ECG Médica, S.L. €18,000 on 2026-07-15 for: Insufficient technical and organisational measures to ensure information security.
GDPR Articles: Art. 32 GDPR
Sector: Health Care
Country: Spain
Source: https://www.aepd.es/documento/ps-00009-2026.pdf

## Cited law provisions (1)

### GDPR — gdpr-art-32-en

Security of processing

---
Generated by overview.legal · https://overview.legal/posts/607219 · 2026-11-14