Spanish Data Protection Authority (AEPD) · 25 February 2025
IBERMUTUA, MUTUA COLABORADORA CON LA SEGURIDAD SOCIAL NUM.274.
Non-compliance with general data processing principles
Fine€600,000Fine issued
- Regulator
- Spanish Data Protection Authority (AEPD)
- Decided
- 25 February 2025
- Country
- Spain
- Sector
- Individuals and Private Associations
- Regulator’s reference
- Not recorded
- Fino case number
- 2025/ES/102
What happened
An insurance company was fined €1,000,000 by a DPA after a coding error caused the personal data, including special category data, of 3,395 individuals to be erroneously sent via email to 354 recipient companies.
Summary from the GDPRhub page for this decision, written by its volunteers, not by Fino. CC BY-NC-SA 4.0.
Rules involved
- Data principles
Sources
The facts on this page come from the sources above, as they recorded them. Nothing has been estimated or filled in. Not legal advice.
Spotted a mistake? Write to angelillolorenzo@gmail.com and quote 2025/ES/102.