# ALÍA GESTIÓN INTEGRAL DE SERVICIOS, S.L.: Insufficient technical and organisational measures to ensure information security

- Type: Enforcement
- Source: Spanish Data Protection Authority (aepd)
- Date: 2026-03-20
- Original: https://www.enforcementtracker.com/ETid-3202
- Canonical: https://overview.legal/posts/83467
- Topics: Integrity and Confidentiality Principle, Security, Supervisory Authorities, Personal Data, Supervision

## Summary

The Spanish Data Protection Authority (AEPD) fined ALÍA GESTIÓN INTEGRAL DE SERVICIOS, S.L. €150,000 for failing to implement sufficient technical and organizational measures to ensure information security. The enforcement action, initiated on March 20, 2026, found the company violated Article 5(1)(f) of the GDPR by not adequately guaranteeing the confidentiality and integrity of personal data under its control.

## Full text

Spanish Data Protection Authority (aepd) fined ALÍA GESTIÓN INTEGRAL DE SERVICIOS, S.L. €150,000 on 2026-03-20 for: Insufficient technical and organisational measures to ensure information security.
GDPR Articles: Art. 5 (1) f) GDPR
Sector: Industry and Commerce
Country: Spain
Source: https://www.aepd.es/documento/ps-00511-2025.pdf

---
Generated by overview.legal · https://overview.legal/posts/83467 · 2026-08-23