- Enforcing jurisdiction
- Spain · Geography does not establish applicable law.
- Confirmed applicable legislation
- Privacy topics
UNITED PARCEL SERVICE ESPAÑA LTD Y COMPAÑIA SRC – €70,000 Fine (Spain, 2022)
Privacy enforcement record
This record is classified outside cookie consent. Subject classification does not confirm an applicable law. It is not included in cookie statistics or the Risk Calculator.
UPS was fined €70,000 for delivering a package to a neighbor without the sender's consent. The Spanish data protection authority found this was an unauthorized disclosure of personal data. This case serves as a warning to companies about the importance of protecting customer information.
What happened
UPS delivered a package to a neighbor without the sender's consent, leading to a data breach.
Who was affected
A customer whose package was delivered to the wrong person without their permission.
What the authority found
The authority ruled that UPS violated GDPR by failing to protect personal data adequately.
Why this matters
This ruling highlights the need for companies to implement strong data protection measures. Businesses should ensure they have clear policies to prevent unauthorized disclosures of customer information.
View original scraped data
Original imported citations before automated processing; the processing history does not establish independent verification.
Source checks
Linked-source text retrieved.
Automated check recorded — 12 March 2026.
Processing notes: national law identified.
Retrieved text may be a secondary summary or an announcement. These automated statuses do not establish that the original decision was read or that the record received an independent legal review. How we check sources
The Spanish DPA has imposed a fine of EUR 70,000 on UNITED PARCEL SERVICE ESPAÑA LTD Y COMPAÑIA SRC (UPS). A person had filed a complaint with the DPA because UPS had delivered a package from them to a neighbor without their consent. The DPA considered this to be an unauthorized disclosure of their data, which was a result of a lack of technical and organizational measures for personal data protection. The DPA also found that this unauthorized disclosure of personal data constituted a violation of the principle of integrity and confidentiality.
Related Enforcement Actions (0)
No other enforcement actions found for UNITED PARCEL SERVICE ESPAÑA LTD Y COMPAÑIA SRC in ES
This is the only recorded action for this entity in this jurisdiction.
Details
Fine Date
3 November 2022
Authority
Agencia Española de Protección de Datos
Fine Amount
€70,000
About this data
Cite as: Cookie Fines. UNITED PARCEL SERVICE ESPAÑA LTD Y COMPAÑIA SRC - Spain (2022). Retrieved from cookiefines.eu
Last updated: