Spanish Data Protection Authority (AEPD) · 15 March 2021
Air Europa Lineas Aereas, SA.
Insufficient technical and organisational measures to ensure information security
Fine€600,000Fine issued
- Regulator
- Spanish Data Protection Authority (AEPD)
- Decided
- 15 March 2021
- Country
- Spain
- Sector
- Industry and Commerce
- Regulator’s reference
- Not recorded
- Fino case number
- 2021/ES/148
What happened
The Spanish DPA (AEPD) fined Air Europa Líneas Aéreas S.A. €600,000 for the infringement of Articles 32(1) and 33 GDPR, due to the lack of appropriate technical and organisational measures and of an adequate level of security and due to the delay in the notification of a personal data breach.
Summary from the GDPRhub page for this decision, written by its volunteers, not by Fino. CC BY-NC-SA 4.0.
Rules involved
- Art. 32Security of processing32(1)Read →
- Art. 33Notification of a personal data breach to the supervisory authorityRead →
- Data breach
- Data security
Sources
The facts on this page come from the sources above, as they recorded them. Nothing has been estimated or filled in. Not legal advice.
Spotted a mistake? Write to angelillolorenzo@gmail.com and quote 2021/ES/148.