INSTITUT MARQUÉS OBSTETRICIA I GINECOLOGIA, S.L.P. – €48,000 Fine (Spain, 2023)
General GDPR enforcement action
This case relates to broader data protection obligations, not specifically to cookie or consent banner compliance. It is not included in cookie statistics or the Risk Calculator.
Institut Marquès in Spain was fined for a data breach that exposed personal information of patients and employees. This is significant because it shows that companies must take strong security measures to protect personal data. The ruling serves as a warning for businesses to improve their data protection practices.
What happened
Institut Marquès suffered a data breach where personal data was unlawfully accessed.
Who was affected
Patients and employees whose personal data was compromised in the breach.
What the authority found
The Spanish authority found that Institut Marquès failed to implement adequate security measures and inform affected individuals about the breach.
Why this matters
This case underscores the importance of data security and timely communication with affected individuals. Companies should prioritize strong data protection measures to avoid similar penalties.
GDPR Articles Cited
The Spanish DPA has imposed a finea INSTITUT MARQUÉS OBSTETRICIA I GINECOLOGIA, S.L.P. The controller had suffered a data breach in which personal patient and employee data had been unlawfully accessed. During its investigation, the DPA found that the controller had failed to take appropriate technical and organizational measures to protect personal data. The DPA also found that the controller failed to properly inform data subjects about the data breach. The original fine of EUR 80,000 was reduced to EUR 48,000 due to voluntary payment and acknowledgement of responsibility.
Related Enforcement Actions (0)
No other enforcement actions found for INSTITUT MARQUÉS OBSTETRICIA I GINECOLOGIA, S.L.P. in ES
This is the only recorded action for this entity in this jurisdiction.
Details
Fine Date
2 November 2023
Authority
Agencia Española de Protección de Datos
Fine Amount
€48,000
Enforcement Tracker ID
ETid-2279
About this data
Cite as: Cookie Fines. INSTITUT MARQUÉS OBSTETRICIA I GINECOLOGIA, S.L.P. - Spain (2023). Retrieved from cookiefines.eu
Last updated: