Details:

Summary The Spanish DPA has imposed a fine on the real estate agency PUNTO BADAL-BCN S.L.. The controller had sent marketing e-mails to several people in an open distribution list, making the email addresses of all recipients visible to the other recipients. The original fine of EUR 5,000 was reduced to EUR 4,000 due to voluntary payment.
Link: link
Related articles:  Art. 5 (1) f) GDPR, Art. 32 (1) GDPR
Type: Insufficient technical and organisational measures to ensure information security
Fine: EUR 4,000
Sector Real Estate

 

All data is based on The CMS’s Law GDPR Enforcement Tracker Source: https://www.enforcementtracker.com/

Tags: case law