Gureak Lanean SA – Dismissed (Spain, 2021)

Dismissed
Agencia Española de Protección de Datos11 March 2021Spain
final
Dismissed

General GDPR enforcement action

This case relates to broader data protection obligations, not specifically to cookie or consent banner compliance. It is not included in cookie statistics or the Risk Calculator.

The Spanish DPA dismissed a case against Gureak Lanean after a hacking attempt. The company had good security measures in place, which prevented a serious data breach.

What happened

Gureak Lanean faced a hacking attempt but was found not in violation of data protection rules.

Who was affected

Gureak Lanean and potentially affected users whose data was accessed during the hacking attempt.

What the authority found

The DPA concluded that Gureak Lanean had implemented adequate security measures to protect personal data.

Why this matters

This case shows that having strong security protocols can protect companies from liability in the event of a data breach. Businesses should invest in cybersecurity to safeguard their data.

GDPR Articles Cited
Automatically processed
Art. 32(1) GDPR
View original scraped data
Art. 32(1) GDPR

Original imported citations before automated processing; the processing history does not establish independent verification.

Source checks

Linked-source text retrieved.

Automated check recorded — 18 October 2026.

No issues were reported by that automated check.

Retrieved text may be a secondary summary or an announcement. These automated statuses do not establish that the original decision was read or that the record received an independent legal review. How we check sources

Full Legal Summary
Detailed

A company called Gureak Lanean suffered an attempt of hacking of their servers. The attacker accessed the data stored in several servers, although according to the company, only a scarce amount of information went to the outside. The AEPD did not receive any complaint from any affected data subject. Was this data breach a violation of Article 32(1) GDPR? The AEPD concluded that there was no violation of Article 32(1) GDPR, because the company had implemented appropriate technical and organisational measures to ensure a level of security, as they had protocols in case of breach, had a quick reaction and has already taken measures to avoid breaches from happening in the future.

Outcome

Dismissed

The complaint or investigation was dismissed.

Related Enforcement Actions (0)

No other enforcement actions found for Gureak Lanean SA in ES

This is the only recorded action for this entity in this jurisdiction.

Details

Decision Date

11 March 2021

Authority

Agencia Española de Protección de Datos

GDPRhub ID

gdprhub-3263

About this data

Data: GDPRhub (noyb.eu)
Licensed under CC BY-NC-SA 4.0
Automatically normalized and classified

Cite as: Cookie Fines. Gureak Lanean SA - Spain (2021). Retrieved from cookiefines.eu

Report Inaccuracy

Last updated: