Spanish Data Protection Authority (AEPD) · 22 April 2025
NOVATES ALIMENTACIÓN MADRID, S.L.
Insufficient technical and organisational measures to ensure information security
Fine€12,000Fine issued
- Regulator
- Spanish Data Protection Authority (AEPD)
- Decided
- 22 April 2025
- Country
- Spain
- Sector
- Industry and Commerce
- Regulator’s reference
- Not recorded
- Fino case number
- 2025/ES/083
What happened
A store was fined €12,000 for failing to implement appropriate access restrictions regarding CCTV footage, in violation of Article 32 GDPR.
Summary from the GDPRhub page for this decision, written by its volunteers, not by Fino. CC BY-NC-SA 4.0.
Rules involved
- Data security
Sources
The facts on this page come from the sources above, as they recorded them. Nothing has been estimated or filled in. Not legal advice.
Spotted a mistake? Write to angelillolorenzo@gmail.com and quote 2025/ES/083.