Enforcing jurisdiction
Spain · Geography does not establish applicable law.
Confirmed applicable legislation
Privacy topics

Corporación radiotelevisión espanola – €60,000 Fine (Spain, 2019)

€60,000Agencia Española de Protección de Datos19 November 2019Spain
final
Fine

Privacy enforcement record

This record is classified outside cookie consent. Subject classification does not confirm an applicable law. It is not included in cookie statistics or the Risk Calculator.

The Spanish data protection agency fined Corporación Radiotelevisión Española €60,000 for losing six unencrypted USB sticks with personal data. This incident affected around 11,000 people and highlights the importance of securing personal information. Companies must ensure they protect sensitive data to avoid costly penalties.

What happened

Corporación Radiotelevisión Española reported losing six unencrypted USB sticks containing personal data.

Who was affected

About 11,000 individuals whose personal data was stored on the lost USB sticks.

What the authority found

The agency found that the company failed to adequately secure personal data, leading to the fine.

Why this matters

This case serves as a warning to organizations about the need for strong data security measures. It reinforces that failing to protect personal data can lead to significant financial penalties.

Recorded legal citations
Automatically processed
Art. 32 GDPR
View original scraped data
Art. 32(GDPR)

Original imported citations before automated processing; the processing history does not establish independent verification.

Source checks

Secondary-source text retrieved.

Automated check recorded — 12 March 2026.

No issues were reported by that automated check.

Retrieved text may be a secondary summary or an announcement. These automated statuses do not establish that the original decision was read or that the record received an independent legal review. How we check sources

Full Legal Summary
Detailed

CORPORACIÓN RADIOTELEVISIÓN ESPAÑOLA and the trade union have reported a security breach to the AEPD after six unencrypted USB sticks containing personal data were lost. The violation affected about 11,000 people, including identification data, employment data, data about criminal convictions and health data.

Related Enforcement Actions (0)

No other enforcement actions found for Corporación radiotelevisión espanola in ES

This is the only recorded action for this entity in this jurisdiction.

Details

Fine Date

19 November 2019

Authority

Agencia Española de Protección de Datos

Fine Amount

€60,000

About this data

Data: CMS GDPR Enforcement Tracker
Licensed under CC BY-NC-SA 4.0
Automatically normalized and classified

Cite as: Cookie Fines. Corporación radiotelevisión espanola - Spain (2019). Retrieved from cookiefines.eu

Report Inaccuracy

Last updated: