Madrileña Red de Gas
- Country
- Spain
- Fine
- 12,000 EUR
- Date
- 2019-01-21
- Sector
- Technical Sector
- Articles
- Art. 32 GDPR
Failure to implement sufficient measures to ensure information security
The gas company did not have the technical measures necessary to check the identity of the data of the persons involved. A third party claimed that the company had sent its information in relation to a request by e-mail to a third party. Authority: Spanish Data Protection Authority (AEPD)
Source: https://www.aepd.es/resoluciones/PS-00188-2019_ORI.pdf
Reported by: Andersen Tax & Legal