Corporación radiotelevisión espanola
- Country
- Spain
- Fine
- 60,000 EUR
- Date
- 2019-11-19
- Sector
- Private Sector
- Articles
- Art. 32 GDPR
Insufficient technical and organisational measures to ensure information security
CORPORACIÓN RADIOTELEVISIÓN ESPAÑOLA and the trade union have reported a security breach to the AEPD after six unencrypted USB sticks containing personal data were lost. The breach affected approximately 11,000 people, including identification data, employment data, data on criminal convictions and health data.
Source: https://www.aepd.es/resoluciones/PS-00305-2019_ORI.pdf
Reported by: Andersen Tax & Legal