INTERURBANA DE AUTOBUSES, S.A. – €70,000 Fine (Spain, 2024)
General GDPR enforcement action
This case relates to broader data protection obligations, not specifically to cookie or consent banner compliance. It is not included in cookie statistics or the Risk Calculator.
INTERURBANA DE AUTOBUSES, S.A. was fined for mistakenly posting sensitive employee information on bulletin boards. This mistake included personal details like addresses, which violated data protection rules. This case serves as a reminder for companies to handle employee data carefully and only share what is necessary.
What happened
The company published a full list of employees, including sensitive information, on public bulletin boards.
Who was affected
Employees of INTERURBANA DE AUTOBUSES, S.A. whose personal information was publicly displayed.
What the authority found
The Spanish DPA found that the company violated the principle of data minimization by sharing more personal data than necessary.
Why this matters
This ruling highlights the importance of protecting employee privacy and ensuring that only essential information is shared. Companies should review their data handling practices to avoid similar mistakes.
GDPR Articles Cited
View original scraped data
Original data from scraper before AI verification against source document.
The Spanish DPA has fined INTERURBANA DE AUTOBUSES, S.A. EUR 70,000 after an employee filed a complaint over the publication of personal data on the company's bulletin boards. According to the data controller, an error in the HR department led to printing a full list of the employees—including sensitive details like addresses—instead of the electoral roll, which is meant to include only the information necessary for union elections. The DPA considered this to be a violation of the principle of data minimization, since, on the one hand, more personal data than necessary for the election was published and, by posting it on the bulletin boards, there was a risk that third parties could see the data from the outside through a window.
Related Enforcement Actions (0)
No other enforcement actions found for INTERURBANA DE AUTOBUSES, S.A. in ES
This is the only recorded action for this entity in this jurisdiction.
Details
Fine Date
16 December 2024
Authority
Agencia Española de Protección de Datos
Fine Amount
€70,000
Enforcement Tracker ID
ETid-2534
About this data
Cite as: Cookie Fines. INTERURBANA DE AUTOBUSES, S.A. - Spain (2024). Retrieved from cookiefines.eu
Last updated: