UNITED PARCEL SERVICE ESPAÑA LTD. Y CIA SRC – €84,000 Fine (Spain, 2023)

€84,000Agencia Española de Protección de Datos7 June 2023Spain
reduced
Fine

General GDPR enforcement action

This case relates to broader data protection obligations, not specifically to cookie or consent banner compliance. It is not included in cookie statistics or the Risk Calculator.

The Spanish Data Protection Authority fined UPS €84,000 for delivering a package to a store instead of the recipient's home, exposing their personal information. The fine was reduced from €140,000 after UPS admitted fault and paid voluntarily. This case emphasizes the need for companies to protect customer data during deliveries.

What happened

UPS delivered a package to a store without the recipient's consent, exposing their personal information.

Who was affected

A person whose postal address and phone number were disclosed to third parties without their consent.

What the authority found

The authority determined that UPS violated GDPR by failing to protect the recipient's personal data during delivery.

Why this matters

This case serves as a reminder for delivery companies to ensure customer data is handled securely. Mishandling deliveries can lead to privacy breaches and financial penalties.

GDPR Articles Cited

Art. 32 GDPR
Art. 5(1)(f) GDPR
Full Legal Summary
Detailed

The Spanish DPA has imposed a fine on UNITED PARCEL SERVICE ESPAÑA LTD. Y CIA SRC a fine. A person had filed a complaint against the controller because a package addressed to them was delivered to a store and not to their home without their consent, resulting in their postal address and telephone number being disclosed to third parties. The DPA considered this to be a violation of Art. 5 (1) f) GDPR and Art. 32 GDPR. The original fine of EUR 140,000 was reduced to EUR 84,000 due to voluntary payment and admission of guilt.

Related Enforcement Actions (0)

No other enforcement actions found for UNITED PARCEL SERVICE ESPAÑA LTD. Y CIA SRC in ES

This is the only recorded action for this entity in this jurisdiction.

Details

Fine Date

7 June 2023

Authority

Agencia Española de Protección de Datos

Fine Amount

€84,000

Enforcement Tracker ID

ETid-1872

About this data

Data: CMS GDPR Enforcement Tracker
Licensed under CC BY-NC-SA 4.0
AI-verified and classified

Cite as: Cookie Fines. UNITED PARCEL SERVICE ESPAÑA LTD. Y CIA SRC - Spain (2023). Retrieved from cookiefines.eu

Report Inaccuracy

Last updated: