Spanish Data Protection Authority (AEPD) · 14 September 2026
FEDERACIÓN ESPAÑOLA DE CICLISMO
Insufficient technical and organisational measures to ensure information security
Fine€4,800Fine issued
- Regulator
- Spanish Data Protection Authority (AEPD)
- Decided
- 14 September 2026
- Country
Spain- Sector
- Individuals and Private Associations
- Regulator’s reference
- Not recorded
- Fino case number
- 2026/ES/056
What happened
The DPA fined a controller €4,800 after the confidentiality and integrity of 261,965 minors and adults’ personal data was compromised during a data breach. This was the result of inadequate implementation of security measures on its platform.
Summary from the GDPRhub page for this decision, written by its volunteers, not by Fino. CC BY-NC-SA 4.0.
Rules involved
- Data principles
- Data security
Sources
The facts on this page come from the sources above, as they recorded them. Nothing has been estimated or filled in. Not legal advice.
Spotted a mistake? Thank you for telling me: write to hello@finoprivacy.com and quote 2026/ES/056.