AEPD (Spain) - PS/00389/2019
| AEPD - PS/00389/2019 | |
|---|---|
 | |
| Authority: | AEPD (Spain) |
| Jurisdiction: | Spain |
| Relevant Law: | Article 5 GDPR Article 32 GDPR Article 33 GDPR Article 34 GDPR Article 58(2) GDPR Article 83 GDPR |
| Type: | Investigation |
| Outcome: | Violation Found |
| Started: | |
| Decided: | |
| Published: | |
| Fine: | None |
| Parties: | POLICIA LOCAL del AYUNTAMIENTO DE BADAJOZ SERVICIO AJENO DE PREVENCION LABORAL EXTREMEÑA SERVICIO AJENO DE PREVENCION LABORAL EXTREMEÑA |
| National Case Number/Name: | PS/00389/2019 |
| European Case Law Identifier: | n/a |
| Appeal: | Unknown |
| Original Language(s): | Spanish |
| Original Source: | Agencia Española de Protección de Datos (in ES) |
| Initial Contributor: | Silvia López Arnao |
Spanish DPA found that leaving the respondent's workers' medical reports on the street at sight constituted a breach of the principle of integrity and confidentiality of data processing under the GDPR.
English Summary
Facts
The local authorities filed a complaint with the Spanish DPA against the complainant for an alleged violation of the GDPR by finding scattered on the street medical examination reports concerning workers of the respondent.
Dispute
Is it compliant with Article 32 of the GDPR to leave at sight in the street data concerning the medical reports of employees?
Holding
The Spanish DPA found that the respondent is responsible for not having made decisions aimed at effectively implementing appropriate technical and organisational measures to ensure a level of safety appropriate to the risk to ensure the confidentiality of the data.
Comment
Further Resources
Share blogs or news articles here!
English Machine Translation of the Decision
The decision below is a machine translation of the Spanish original. Please refer to the Spanish original for more details.
