Spain: AEPD fines Centro De Estudio Dirigidos Delta €5,000 for GDPR violation
The Spanish data protection authority ('AEPD') issued, on 16 March 2020, a resolution ('the Resolution') in proceeding PS/00425/2019, fining Centro De Estudio Dirigidos Delta, S.L. €5,000 for violation of Article 5(1)(f) of the General Data Protection Regulation (Regulation (EU) 2016/679) ('GDPR'). In particular, the Resolution outlines that the complainant argued that Centro De Estudio Dirigidos Delta had sent a message via WhatsApp Inc., containing personal data, such as names, surnames, and ID numbers, to a third party without the consent of the data subjects. In addition, the Resolution highlights that Centro De Estudio Dirigidos Delta's conduct amounted to a violation of the principles of integrity and confidentiality, as provided by Article 5(1)(f) of the GDPR. As a consequence, the AEPD imposed a fine of €5,000 on Centro De Estudio Dirigidos Delta.
You can read the Resolution, only available in Spanish, here.