Go to Wolters Kluwer VitalLaw.comGo to Wolters Kluwer VitalLaw.com
VitalLaw®
  • Find answers to your questions
  • Log in to access your subscriptions
In depth. On point.
In depth. On point.
  • Home
  • Legal Directory
  • Home
  • Legal Directory
In depth. On point.
  • Articles
    • Articles
  • Organizations
    • Organizations
    • EU Privacy Board Largely Satisfied With Rollout of EU-U.S. Privacy Pact
    • Meta Faces $16M Privacy Fine in South Korea
    • OIG’s report highlights major challenges in oversight, workforce, cybersecurity, and contract management
    • STRATEGIC PERSPECTIVES—Baker Botts Lawyers Analyze SEC Enforcement in Cyber, AI
    • Spanish Authorities Fine Electronics Retailer Over Data Breach
    • Supreme Court Rejects Privacy Challenge to Facebook
    • TikTok Faces Privacy Probe in Brazil Over Handling of Kids’ Data
    • Treasury Department exceeded requirements of Executive Order on AI, Brookings analysis says
  • Articles
    • Articles
  • Organizations
    • Organizations

    Cybersecurity Policy Report, Spanish Authorities Fine Electronics Retailer Over Data Breach, (Nov 5, 2024)

    By Tony Foley

    In a decision published yesterday, the Spanish data protection authority, Agencia Espanola de Proteccion de Datos (AEPD), imposed a fine of 6.5 million euros ($7.1 million) against The Phone House Spain SL (TPHS), an electronics retailer, for violati ...

    By Tony Foley

    In a decision published yesterday, the Spanish data protection authority, Agencia Espanola de Proteccion de Datos (AEPD), imposed a fine of 6.5 million euros ($7.1 million) against The Phone House Spain SL (TPHS), an electronics retailer, for violations of the European Union’s General Data Protection Regulation (GDPR) following a data breach.

    The decision is available only in Spanish, but a machine translation of the text reveals that in 2021, TPHS notified the AEPD of a data breach resulting from a cyber attack that affected the personal data of more than 13 million people. The AEPD’s investigation found that TPHS did not have appropriate procedures and rules in place to control access to its network or monitor activity within the network. The agency also found that TPHS failed to ensure proper security of the network. Accordingly, AEPD found that the company failed to implement appropriate technical and organizational measures to guarantee a level of security appropriate to the risks involved in maintaining its network in violation of GDPR article 32.

    News: LitigationEnforcement DataSecurity DataBreach GDPR DataPrivacy

    © 2026 CCH Incorporated and its affiliates and licensors. All rights reserved.

    • Manage Cookie Preferences
    • Privacy Statement
    • Terms of Use