- Enforcing jurisdiction
- Spain · Geography does not establish applicable law.
- Confirmed applicable legislation
- Privacy topics
UST GLOBAL ESPAÑA, S.A. – €3,000 Fine (Spain, 2021)
Privacy enforcement record
This record is classified outside cookie consent. Subject classification does not confirm an applicable law. It is not included in cookie statistics or the Risk Calculator.
UST GLOBAL ESPAÑA, S.A. was fined for sharing personal information of two employees without permission. This included their names, email addresses, and ID card numbers, which allowed them to access each other's data. This case highlights the importance of keeping employee information private and secure.
What happened
UST GLOBAL ESPAÑA, S.A. shared personal information of two employees via email without their consent.
Who was affected
Two employees whose personal information was shared without their permission.
What the authority found
The Spanish DPA ruled that UST GLOBAL ESPAÑA, S.A. violated the principle of integrity and confidentiality by sharing personal data.
Why this matters
This ruling emphasizes that companies must protect employee data and not share it without consent. Businesses should review their data handling practices to avoid similar violations.
View original scraped data
Original imported citations before automated processing; the processing history does not establish independent verification.
Source checks
Linked-source text retrieved.
Review needed — 15 March 2026.
Processing notes: national law identified, amount discrepancy.
Retrieved text may be a secondary summary or an announcement. These automated statuses do not establish that the original decision was read or that the record received an independent legal review. How we check sources
The Spanish DPA (AEPD) has imposed a fine of EUR 3,000 on UST GLOBAL ESPAÑA, S.A.. An employee filed a complaint against the controller with the DPA. UST GLOBAL ESPAÑA, S.A. was acting as a service provider for OpenBank as part of a project. On 08.01.2020, the controller informed OpenBank by email that two new employees (one of them the complainant) would join the project, for which it requested access to the VPN and other applications. This email, which was sent with a copy to both employees, included their first and last names, professional email addresses, and ID card numbers. This way, both gained mutual unauthorized access to their colleague's data. The DPA considered this to be a violation of the principle of integrity and confidentiality.
Related Enforcement Actions (0)
No other enforcement actions found for UST GLOBAL ESPAÑA, S.A. in ES
This is the only recorded action for this entity in this jurisdiction.
Details
Fine Date
27 July 2021
Authority
Agencia Española de Protección de Datos
Fine Amount
€3,000
About this data
Cite as: Cookie Fines. UST GLOBAL ESPAÑA, S.A. - Spain (2021). Retrieved from cookiefines.eu
Last updated: