UST GLOBAL ESPAÑA, S.A. – €3,000 Fine (Spain, 2021)
General GDPR enforcement action
This case relates to broader data protection obligations, not specifically to cookie or consent banner compliance. It is not included in cookie statistics or the Risk Calculator.
UST GLOBAL ESPAÑA, S.A. was fined €3,000 for sharing employee data without permission. They accidentally sent an email with personal details to the wrong people. This case highlights the importance of protecting employee information.
What happened
UST GLOBAL ESPAÑA, S.A. shared employees' personal data in an email without their consent.
Who was affected
Two employees whose personal information, including ID numbers, was shared with each other without permission.
What the authority found
The Spanish data protection authority found that UST GLOBAL ESPAÑA, S.A. violated the GDPR's integrity and confidentiality rules.
Why this matters
This case underscores the need for companies to handle employee data carefully and ensure emails are sent to the correct recipients. It serves as a reminder to review data protection practices to avoid similar mistakes.
GDPR Articles Cited
The Spanish DPA (AEPD) has imposed a fine of EUR 3,000 on UST GLOBAL ESPAÑA, S.A.. An employee filed a complaint against the controller with the DPA. UST GLOBAL ESPAÑA, S.A. was acting as a service provider for OpenBank as part of a project. On 08.01.2020, the controller informed OpenBank by email that two new employees (one of them the complainant) would join the project, for which it requested access to the VPN and other applications. This email, which was sent with a copy to both employees, included their first and last names, professional email addresses, and ID card numbers. This way, both gained mutual unauthorized access to their colleague's data. The DPA considered this to be a violation of the principle of integrity and confidentiality.
Related Enforcement Actions (0)
No other enforcement actions found for UST GLOBAL ESPAÑA, S.A. in ES
This is the only recorded action for this entity in this jurisdiction.
Details
Fine Date
27 July 2021
Authority
Agencia Española de Protección de Datos
Fine Amount
€3,000
Enforcement Tracker ID
ETid-798
About this data
Cite as: Cookie Fines. UST GLOBAL ESPAÑA, S.A. - Spain (2021). Retrieved from cookiefines.eu
Last updated: