Enforcement · Spanish Data Protection Authority (aepd) EN LLM context A cited markdown file you can paste into your AI assistant (ChatGPT, Claude, a RAG or project knowledge base) to ground it in this document. Contains: this document’s text, its sections with their topics, and the full text of every law provision it applies. Everything links back to its source on overview.legal — legal information, not advice.
ALÍA GESTIÓN INTEGRAL DE SERVICIOS, S.L.: Insufficient technical and organisational measures to ensure information security
Summary
The Spanish Data Protection Authority (AEPD) fined ALÍA GESTIÓN INTEGRAL DE SERVICIOS, S.L. €150,000 for failing to implement sufficient technical and organizational measures to ensure information security. The enforcement action, initiated on March 20, 2026, found the company violated Article 5(1)(f) of the GDPR by not adequately guaranteeing the confidentiality and integrity of personal data under its control.
How it connects
Related across sources
Case Law Rotterdam Court: DPA did not err in finding ING contactless chip payments GDPR-compliant Case Law VG Düsseldorf - 29 K 3490/24 Case Law SO Warszawa - III C 904/23 Guidance Art. 29 WP Guidelines on GDPR transparency requirements (WP260 rev.01) Literature The Right to Be Forgotten in The Context of Mobile Number Recycling Guidance Recommendations 1/2025 on the 2027 WADA World Anti-Doping Code
View full content at source www.enforcementtracker.com