Pharmacy owner – €10,000 Fine (Spain, 2023)
General GDPR enforcement action
This case relates to broader data protection obligations, not specifically to cookie or consent banner compliance. It is not included in cookie statistics or the Risk Calculator.
A pharmacy owner was fined for throwing away personal documents, including medical information, in public trash. This matters because it shows that businesses must protect sensitive information and cannot dispose of it carelessly.
What happened
The pharmacy owner disposed of personal documents containing medical information in public trash containers.
Who was affected
Individuals whose medical information was included in the discarded documents were affected.
What the authority found
The Spanish Data Protection Authority found that the pharmacy owner violated GDPR by failing to protect personal data.
Why this matters
This case serves as a reminder that businesses must have secure methods for disposing of personal data. Proper data handling practices are essential to avoid fines and protect customer privacy.
GDPR Articles Cited
The Spanish DPA has imposed a fine of EUR 10,000 on a pharmacy owner. The controller had disposed of a large number of personal documents, including medical information of data subjects, in public trash containers that were accessible to other people.
Related Enforcement Actions (0)
No other enforcement actions found for Pharmacy owner in ES
This is the only recorded action for this entity in this jurisdiction.
Details
Fine Date
24 November 2023
Authority
Agencia Española de Protección de Datos
Fine Amount
€10,000
Enforcement Tracker ID
ETid-2127
About this data
Cite as: Cookie Fines. Pharmacy owner - Spain (2023). Retrieved from cookiefines.eu
Last updated: