Spanish Data Protection Authority (AEPD) · 13 June 2025
OCI CINE, S.L.
Insufficient technical and organisational measures to ensure information security
Fine€18,000Fine issued
- Regulator
- Spanish Data Protection Authority (AEPD)
- Decided
- 13 June 2025
- Country
- Spain
- Sector
- Industry and Commerce
- Regulator’s reference
- Not recorded
- Fino case number
- 2025/ES/058
What happened
The DPA fined a cinema chain €18,000 for automatically including another person's personal data during a customer’s purchase of movie tickets using the controller’s app, in violation of the principles of data accuracy and security of processing.
Summary from the GDPRhub page for this decision, written by its volunteers, not by Fino. CC BY-NC-SA 4.0.
Rules involved
- Art. 5Principles relating to processing of personal data5(1)(d)Read →
- Art. 32Security of processingRead →
- Data principles
- Data security
Sources
The facts on this page come from the sources above, as they recorded them. Nothing has been estimated or filled in. Not legal advice.
Spotted a mistake? Write to angelillolorenzo@gmail.com and quote 2025/ES/058.