Spanish Data Protection Authority (AEPD) · 16 March 2023
AFIANZA ASESORES S.L.
Non-compliance with general data processing principles
Fine€145,000Fine issued
- Regulator
- Spanish Data Protection Authority (AEPD)
- Decided
- 16 March 2023
- Country
- Spain
- Sector
- Finance, Insurance and Consulting
- Regulator’s reference
- Not recorded
- Fino case number
- 2023/ES/002
What happened
The DPA fined a controller €145,000 after a USB stick, which was not encrypted and contained personal data relating to a criminal proceeding, was stolen. It found a breach of the confidentiality principle even though there was no evidence the data was accessed.
Summary from the GDPRhub page for this decision, written by its volunteers, not by Fino. CC BY-NC-SA 4.0.
Rules involved
- Art. 5Principles relating to processing of personal data5(1)(f)Read →
- Art. 32Security of processingRead →
- Data principles
- Data security
Sources
The facts on this page come from the sources above, as they recorded them. Nothing has been estimated or filled in. Not legal advice.
Spotted a mistake? Write to angelillolorenzo@gmail.com and quote 2023/ES/002.