Agency – €1,800 Fine (Spain, 2021)
General GDPR enforcement action
This case relates to broader data protection obligations, not specifically to cookie or consent banner compliance. It is not included in cookie statistics or the Risk Calculator.
A Spanish agency was fined EUR 1,800 for throwing away documents with personal data in the trash. The Spanish Data Protection Authority found this lacked proper security measures. This case shows the importance of securely disposing of documents to protect client information.
What happened
An agency disposed of documents with personal data in the garbage.
Who was affected
Clients whose personal data was on the discarded documents were affected.
What the authority found
The Spanish Data Protection Authority found the agency did not have adequate security measures for disposing of personal data.
Why this matters
This case highlights the need for businesses to implement secure disposal methods for documents containing personal data. It serves as a warning that improper disposal can lead to fines and breaches of data protection laws.
GDPR Articles Cited
The Spanish DPA (AEPD) has imposed a fine on an agency. The controller had disposed of documents containing personal data of its clients in the garbage. The AEPD considered this to be a lack of security and data protection measures in the sense of Art. 32 GDPR, which states that 'the controller and processor shall implement appropriate technical and organizational measures to ensure an adequate level of security.' The original fine of EUR 3,000 was reduced to EUR 1,800 due to voluntary payment and acknowledgement of responsibility.
Related Enforcement Actions (0)
No other enforcement actions found for Agency in ES
This is the only recorded action for this entity in this jurisdiction.
Details
Fine Date
23 August 2021
Authority
Agencia Española de Protección de Datos
Fine Amount
€1,800
Enforcement Tracker ID
ETid-822
About this data
Cite as: Cookie Fines. Agency - Spain (2021). Retrieved from cookiefines.eu
Last updated: