Shop Macoyn, S.L.
€5K($5K USD)final
Date Issued
2019-12-10
Regulation
Authority
Spanish Data Protection Authority (AEPD)
Country
Spain
Violation Type
Failure to implement sufficient measures to ensure information security
Currency
EUR
Violation Summary
The company sent advertising emails to multiple recipients where every one of the recipients was able to see the email address of all other recipients. This was because the sender sent all the email addresses as CC instead of BCC.
Articles Violated
Art. 32 GDPR