AFIANZA ASESORES S.L. – €145,000 Fine (Spain, 2023)

€145,000Agencia Española de Protección de Datos16 March 2023Spain
final
Fine

General GDPR enforcement action

This case relates to broader data protection obligations, not specifically to cookie or consent banner compliance. It is not included in cookie statistics or the Risk Calculator.

Spain fined AFIANZA ASESORES S.L. EUR 145,000 after a USB stick with personal data was stolen from an unencrypted backpack. The company didn't use proper security measures to protect this sensitive information. This case shows the risk of not securing portable data storage devices.

What happened

AFIANZA ASESORES S.L. had a data breach when a USB stick with personal data was stolen and not encrypted.

Who was affected

Individuals whose personal data, including court-related information, was stored on the stolen USB stick.

What the authority found

The Spanish authority found that the company failed to implement necessary security measures, violating GDPR's data protection rules.

Why this matters

This fine highlights the importance of encrypting portable data storage devices to prevent data breaches. Companies should ensure all personal data is adequately protected, especially when stored on portable devices.

GDPR Articles Cited

AI-verified

Art. 32 GDPR
Art. 5(1)(f) GDPR
View original scraped data
Art. 5(1)(f) GDPR
Art. 32 GDPR

Original data from scraper before AI verification against source document.

Source verified 6 March 2026
verified correct
Full Legal Summary
Detailed

The Spanish DPA has imposed a fine of EUR 145,000 on AFIANZA ASESORES S.L.. The controller had reported a data breach to the DPA, stating that a backpack containing a USB stick with personal data (including data relating to court proceedings) had been stolen. During its investigation, the DPA found that the USB stick was not encrypted and that the controller had failed to implement appropriate technical and organizational measures to protect personal data.

Related Enforcement Actions (0)

No other enforcement actions found for AFIANZA ASESORES S.L. in ES

This is the only recorded action for this entity in this jurisdiction.

Details

Fine Date

16 March 2023

Authority

Agencia Española de Protección de Datos

Fine Amount

€145,000

Enforcement Tracker ID

ETid-2426

About this data

Data: CMS GDPR Enforcement Tracker
Licensed under CC BY-NC-SA 4.0
AI-verified and classified

Cite as: Cookie Fines. AFIANZA ASESORES S.L. - Spain (2023). Retrieved from cookiefines.eu

Report Inaccuracy

Last updated: