Back to Explorer
GDPRTransport

Renfe Operadora S.A.

€1,800,000

Authority

AEPD

Country

Spain

Date Issued

September 1, 2022

Industry

Transport

Summary

Renfe was fined for security vulnerabilities allowing data breaches affecting passenger personal information and inadequate incident notification.

Violation Types

Data BreachSecurityTransparency

Articles Violated

Art. 32 GDPRArt. 33 GDPR

Avoid enforcement risk with automated compliance

IQWorks helps organizations automate GDPR compliance before regulators come knocking.

Talk to an Expert