Details:
| Summary | The Spanish DPA (AEPD) has imposed a fine of EUR 5,000 on CYNGASA, S.L.. The data subject, when requesting a work report, discovered that the controller had disclosed his personal data to a third party company without his consent. The data involved included among others first and last name as well as his social security number. |
| Link: | link |
| Related articles: | Art. 6 GDPR |
| Type: | Insufficient legal basis for data processing |
| Fine: | EUR 5,000 |
| Sector | Employment |
All data is based on The CMS’s Law GDPR Enforcement Tracker Source: https://www.enforcementtracker.com/