Spain: AEPD fines Grupo Valsor Y Losan €2,500 for GDPR violation
The Spanish data protection authority ('AEPD') issued, on 14 February 2020, a resolution ('the Resolution') imposing a fine of €2,500 to Grupo Valsor Y Losan, S.L. for violating Article 5(1)(f) of the General Data Protection Regulation (Regulation (EU) 2016/679) ('GDPR') containing the principles of integrity and confidentiality of personal data, as well as the responsibility of the controller for demonstrating compliance. In particular, the Resolution states that the claimants had filed a complaint against the respondent as the latter had disclosed the data of two of the claimants in a property purchase agreement to a third party.
You can read the Resolution, only available in Spanish, here.