INDECEMI, S.L. – €3,000 Fine (Spain, 2022)
General GDPR enforcement action
This case relates to broader data protection obligations, not specifically to cookie or consent banner compliance. It is not included in cookie statistics or the Risk Calculator.
Spain fined INDECEMI, S.L. EUR 3,000 for sending an email that mistakenly included someone else's personal information. This breach of confidentiality shows the importance of handling personal data carefully in communications.
What happened
INDECEMI, S.L. sent an email containing personal data of another person by mistake.
Who was affected
The person whose personal data was accidentally shared in an email.
What the authority found
The Spanish authority ruled that the company violated GDPR's principle of integrity and confidentiality by mishandling personal data.
Why this matters
This case highlights the importance of ensuring data privacy in communications and serves as a warning to businesses to double-check the information they share electronically. It emphasizes the need for robust data protection practices.
GDPR Articles Cited
The Spanish DPA has imposed a fine of EUR 3,000 on INDECEMI, S.L.. A person had filed a complaint with the DPA against the controller after receiving an email from the controller containing personal data (first name, last name, address, telephone number, etc.) of another person in the context of a complaint. The DPA considered this to be a violation of the principle of integrity and confidentiality.
Related Enforcement Actions (0)
No other enforcement actions found for INDECEMI, S.L. in ES
This is the only recorded action for this entity in this jurisdiction.
Details
Fine Date
3 December 2022
Authority
Agencia Española de Protección de Datos
Fine Amount
€3,000
Enforcement Tracker ID
ETid-1508
About this data
Cite as: Cookie Fines. INDECEMI, S.L. - Spain (2022). Retrieved from cookiefines.eu
Last updated: