Spain: AEPD fines Aema Hispánica €3,600 for violating GDPR
The Spanish data protection authority ('AEPD') issued, on 28 February 2020, a decision ('the Decision') in proceedings PS/00455/2019, fining AEMA Hispánica, S.L. €3,600 for processing personal data in violation of Article 5(1)(f) of the General Data Protection Regulation (Regulation (EU) 2016/679) ('GDPR'). In particular, the AEPD held that AMEA Hispanica had sent to one of its employees the payroll of their co-worker and unlawfully disclosed their personal data to an unauthorised third party.
You can read the Decision, only available in Spanish, here.