Transport Workers' Union of Aragon – €3,000 Fine (Spain, 2023)
General GDPR enforcement action
This case relates to broader data protection obligations, not specifically to cookie or consent banner compliance. It is not included in cookie statistics or the Risk Calculator.
The Transport Workers' Union of Aragon was fined EUR 3,000 for sharing personal data of strike committee members on social media. This is significant because it shows the importance of protecting personal data with strong security measures.
What happened
The union published personal details of strike committee members on social media without adequate protection.
Who was affected
Members of the strike committee whose personal data was shared online.
What the authority found
The Spanish authority found the union failed to protect personal data adequately, violating GDPR's security requirements.
Why this matters
This case underscores the need for organizations to implement robust security measures to protect personal data. It highlights the risks of data breaches and the importance of safeguarding information shared online.
GDPR Articles Cited
The Spanish DPA has fined the Transport Workers' Union of Aragon EUR 3,000. The union had published a document with personal data (surname, first name and identity card number) of members of the strike committee on various social networks. During its investigation, the DPA found that the incident may have occurred due to the union's failure to implement sufficient technical and organizational measures to protect personal data.
Related Enforcement Actions (0)
No other enforcement actions found for Transport Workers' Union of Aragon in ES
This is the only recorded action for this entity in this jurisdiction.
Details
Fine Date
3 January 2023
Authority
Agencia Española de Protección de Datos
Fine Amount
€3,000
Enforcement Tracker ID
ETid-1549
About this data
Cite as: Cookie Fines. Transport Workers' Union of Aragon - Spain (2023). Retrieved from cookiefines.eu
Last updated: