AEPD (Spain) - PS/00179/2020

From GDPRhub
Revision as of 09:33, 23 March 2021 by Cvl (talk | contribs) (Created page with "{{DPAdecisionBOX |Jurisdiction=Spain |DPA-BG-Color=background-color:#ffffff; |DPAlogo=LogoES.jpg |DPA_Abbrevation=AEPD |DPA_With_Country=AEPD (Spain) |Case_Number_Name=PS/00...")
(diff) ← Older revision | Latest revision (diff) | Newer revision → (diff)
AEPD - PS/00179/2020
LogoES.jpg
Authority: AEPD (Spain)
Jurisdiction: Spain
Relevant Law: Article 32(1) GDPR
Article 33 GDPR
Type: Investigation
Outcome: Violation Found
Started:
Decided:
Published: 18.03.2021
Fine: 600 EUR
Parties: Air Europa Líneas Aéreas S.A
Air Europa Líneas Aéreas S.A.
National Case Number/Name: PS/00179/2020
European Case Law Identifier: n/a
Appeal: n/a
Original Language(s): Spanish
Original Source: AEPD decision (in ES)
Initial Contributor: n/a

The Spanish DPA (AEPD) fined Air Europa Líneas Aéreas S.A. with €600,000 for the infringement of Articles 32(1) and 33 GDPR, due to the lack of

English Summary

Facts

Air Europa notified a data breach to the AEPD related to the unauthorized access to contact and credit card information that affected to 489,000 data subjects and to 1,500,000 records.

Dispute

Holding

in progress

Comment

Share your comments here!

Further Resources

Share blogs or news articles here!

English Machine Translation of the Decision

The decision below is a machine translation of the Spanish original. Please refer to the Spanish original for more details.