ASOCIACIÓN DE TÉCNICOS Y PROFESIONALES DEL SECTOR AEROESPACIAL – Violation Found (Spain, 2020)
General GDPR enforcement action
This case relates to broader data protection obligations, not specifically to cookie or consent banner compliance. It is not included in cookie statistics or the Risk Calculator.
A Spanish aerospace union sent out a list of employees' data without permission, leading to a warning from the data authority. The union failed to show they were protecting the data properly. This case underlines the need for organizations to secure personal data and get consent before sharing it.
What happened
An aerospace union shared employees' personal data via email without their consent.
Who was affected
Employees whose data was included in the electoral roll shared by the aerospace union.
What the authority found
The Spanish data authority found that sharing the data without consent violated GDPR's security requirements.
Why this matters
This case stresses the importance of protecting personal data and obtaining consent before sharing it. Organizations should ensure they have strong data security measures in place to avoid similar issues.
GDPR Articles Cited
National Law Articles
ATPSA's union representative at ITP Aero in Aljavir had sent the electoral roll, which includes the data of the employees, by email to different people addresses inside and outside the company, without the consent of the employers. The defendant did not make any allegations, nor did it demonstrate that it had fulfilled its proactive obligation to respect the GDPR when processing data. Does the fact of sending the electoral roll, which includes the personal data of the claimant, by email to different addresses within the company and outside it, constitute a violation of Article 5 (1) (f) of the RGPD? For infringing Article 5(1)(f) GDPR, in conjunction with Article 72(1)(a) LOPDGDD, the Spanish DPA imposed the sanction of warning under Article 83(5)(a) GDPR. The Spanish DPA required the claimed party to provide evidence within one month that appropriate technical or organizational measures have been taken to ensure adequate security for the personal data it is processing, including protection against unauthorized or unlawful processing and loss, accidental destruction, or damage.
Outcome
Violation Found
The DPA found a violation but did not impose a fine.
Related Enforcement Actions (0)
No other enforcement actions found for ASOCIACIÓN DE TÉCNICOS Y PROFESIONALES DEL SECTOR AEROESPACIAL in ES
This is the only recorded action for this entity in this jurisdiction.
Details
About this data
Cite as: Cookie Fines. ASOCIACIÓN DE TÉCNICOS Y PROFESIONALES DEL SECTOR AEROESPACIAL - Spain (2020). Retrieved from cookiefines.eu
Last updated: