{"id":35350,"date":"2025-05-23T10:13:21","date_gmt":"2025-05-23T10:13:21","guid":{"rendered":"https:\/\/www.pkf-attest.es\/noticias\/mandas-datos-personales-por-email-sin-cifrar-enfrentarte-sancion-2\/"},"modified":"2025-05-23T10:13:21","modified_gmt":"2025-05-23T10:13:21","slug":"mandas-datos-personales-por-email-sin-cifrar-enfrentarte-sancion-2","status":"publish","type":"noticias","link":"https:\/\/www.pkf-attest.es\/en\/noticias\/mandas-datos-personales-por-email-sin-cifrar-enfrentarte-sancion-2\/","title":{"rendered":"Do you send personal data by email? You could face a penalty"},"content":{"rendered":"\n<h2 class=\"wp-block-heading has-text-color has-link-color wp-elements-1\" id=\"h-enviar-datos-personales-por-email-sin-cifrar-puede-acarrear-una-sancion\" style=\"color:#0f3780;font-size:24px\">Sending personal data by email without encryption can lead to a penalty<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n\n\n\n<p class=\"has-text-color has-link-color wp-elements-2 wp-block-paragraph\" style=\"color:#000000\">The communication of personal data through various means, such as e-mail, is a practice that all entities, public and private, will necessarily have to carry out at some point in time.<\/p>\n\n\n\n<p class=\"has-text-color has-link-color wp-elements-3 wp-block-paragraph\" style=\"color:#000000\">Despite being an aspect to which, because it is so commonplace, no special attention is paid, the sending of this type of data through digital means of communication may involve a series of risks, especially linked to the possibility that someone may capture that communication, and consequently, that personal data.<\/p>\n\n\n\n<p class=\"has-text-color has-link-color wp-elements-4 wp-block-paragraph\" style=\"color:#000000\">Therefore, it is important to adopt security measures aimed at avoiding possible breaches of the confidentiality of this information, preventing not only access by third parties who could intercept these communications, but also avoiding knowledge of the information derived from an error in the recipient of the information.<\/p>\n\n\n\n<div style=\"height:20px\" aria-hidden=\"true\" class=\"wp-block-spacer\"><\/div>\n\n\n\n<h2 class=\"wp-block-heading has-text-color has-link-color wp-elements-5\" id=\"h-sancion-por-el-envio-de-datos-personales-por-email-de-los-clientes\" style=\"color:#0f3780;font-size:24px\">Penalty for sending personal data by email to customers<\/h2>\n\n\n\n<p class=\"has-text-color has-link-color wp-elements-6 wp-block-paragraph\" style=\"color:#000000\"><strong>The AEPD penalizes a pharmacy with 11,000 euros for sending personal information about its customers via email without legitimacy and without adopting security measures.<\/strong><\/p>\n\n\n\n<p class=\"has-text-color has-link-color wp-elements-7 wp-block-paragraph\" style=\"color:#000000\">The AEPD initiated an investigation after receiving a complaint from the Direcci\u00f3 General D&#8217;Ordenaci\u00f3 i Regulaci\u00f3 Sanit\u00e0ria de la Comunidad Aut\u00f3noma de Catalu\u00f1a, after carrying out inspections to pharmacy offices in the exercise of their powers, in which possible violations of data protection regulations were detected regarding the processing of personal data of residents in geriatric centers by certain pharmacy offices such as, among others: alleged unlawful accesses and transfers of personal health data or the exchange of personal data through unsecured electronic means.<\/p>\n\n\n\n<p class=\"has-text-color has-link-color wp-elements-8 wp-block-paragraph\" style=\"color:#000000\">From the investigations carried out by the AEPD, it was possible to verify the existence of an access granted by a pharmacy to another pharmacy to the database of patients in residences to which the first one provided an SPD service. The other pharmacy accessed this database with passwords provided by the first one, through which it obtained the CIP of the residents, to access their electronic prescription and proceed to dispense the diapers to the persons indicated in an Excel file sent by e-mail also by the first pharmacy. Subsequently, the pharmacy sent a list of the monetary contribution of the residents served, which was paid by the other pharmacy.<\/p>\n\n\n\n<p class=\"has-text-color has-link-color wp-elements-9 wp-block-paragraph\" style=\"color:#000000\">From the investigations carried out, it was possible to conclude, firstly, that the processing of personal data carried out by the pharmacy for the dispensing of diapers to the nursing homes, through the data obtained by the other pharmacy, lacked legitimacy, as the consent of these persons for this processing of personal data by this pharmacy had not been obtained.<\/p>\n\n\n\n<p class=\"has-text-color has-link-color wp-elements-10 wp-block-paragraph\" style=\"color:#000000\">In addition, it was also detected that at no time did the pharmacy inform these individuals, through a clause or a service provision contract, about the processing of their personal data.<\/p>\n\n\n\n<p class=\"has-text-color has-link-color wp-elements-11 wp-block-paragraph\" style=\"color:#000000\">Finally, and as the most relevant aspect of this sanction, the AEPD considered the sending of personal data via e-mail, without adopting security measures, such as, for example, the encryption of the document, in line with some of its latest resolutions issued by the authority. These security measures may have been provided by the e-mail provider (which must be documented), but, otherwise, it will have to be the Data Controller who implements them.<\/p>\n\n\n\n<h3 class=\"wp-block-heading has-text-color has-link-color wp-elements-12\" id=\"h-que-articulos-se-infringen\" style=\"color:#0f3780\">Which articles are infringed?<\/h3>\n\n\n\n<p class=\"has-text-color has-link-color wp-elements-13 wp-block-paragraph\" style=\"color:#000000\"><\/p>\n\n\n\n<p class=\"has-text-color has-link-color wp-elements-14 wp-block-paragraph\" style=\"color:#000000\">For the alleged infringement of Article 6 of the GDPR, as there is no basis of legitimacy, an administrative fine of 5,000 euros is imposed.<\/p>\n\n\n\n<p class=\"has-text-color has-link-color wp-elements-15 wp-block-paragraph\" style=\"color:#000000\">For the alleged infringement of Article 14 of the GDPR, for breach of the duty of information and transparency, an administrative fine of 3,000 euros is imposed.<\/p>\n\n\n\n<p class=\"has-text-color has-link-color wp-elements-16 wp-block-paragraph\" style=\"color:#000000\">For the alleged infringement of Article 32 of the GDPR, for the communication via e-mail of personal information of residents, an administrative fine of 3,000 euros is imposed.<\/p>\n","protected":false},"featured_media":16816,"template":"noticias-corporativa-single-post.php","categories":[],"tags":[214,212],"novedades_corporativa":[],"class_list":["post-35350","noticias","type-noticias","status-publish","has-post-thumbnail","tag-gdpr","tag-news","entry"],"acf":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO Premium plugin v28.5 (Yoast SEO v28.5) - https:\/\/yoast.com\/product\/yoast-seo-premium-wordpress\/ -->\n<title>Do you send personal data by email? You could face a penalty<\/title>\n<meta name=\"description\" content=\"The AEPD penalizes a pharmacy with 11,000 \u20ac for sending unencrypted personal data by email, in violation of the RGPD. Know the risks and how to avoid them.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.pkf-attest.es\/en\/noticias\/mandas-datos-personales-por-email-sin-cifrar-enfrentarte-sancion-2\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Do you send personal data by email? You could face a penalty\" \/>\n<meta property=\"og:description\" content=\"The AEPD penalizes a pharmacy with 11,000 \u20ac for sending unencrypted personal data by email, in violation of the RGPD. Know the risks and how to avoid them.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.pkf-attest.es\/en\/noticias\/mandas-datos-personales-por-email-sin-cifrar-enfrentarte-sancion-2\/\" \/>\n<meta property=\"og:site_name\" content=\"PKF Attest\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.pkf-attest.es\/wp-content\/uploads\/2025\/05\/datos-personales-por-email-min-scaled.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"2560\" \/>\n\t<meta property=\"og:image:height\" content=\"1709\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data1\" content=\"3 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/www.pkf-attest.es\\\/en\\\/noticias\\\/mandas-datos-personales-por-email-sin-cifrar-enfrentarte-sancion-2\\\/\",\"url\":\"https:\\\/\\\/www.pkf-attest.es\\\/en\\\/noticias\\\/mandas-datos-personales-por-email-sin-cifrar-enfrentarte-sancion-2\\\/\",\"name\":\"Do you send personal data by email? You could face a penalty\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.pkf-attest.es\\\/en\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/www.pkf-attest.es\\\/en\\\/noticias\\\/mandas-datos-personales-por-email-sin-cifrar-enfrentarte-sancion-2\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/www.pkf-attest.es\\\/en\\\/noticias\\\/mandas-datos-personales-por-email-sin-cifrar-enfrentarte-sancion-2\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.pkf-attest.es\\\/wp-content\\\/uploads\\\/2025\\\/05\\\/datos-personales-por-email-min-scaled.jpg\",\"datePublished\":\"2025-05-23T10:13:21+00:00\",\"description\":\"The AEPD penalizes a pharmacy with 11,000 \u20ac for sending unencrypted personal data by email, in violation of the RGPD. Know the risks and how to avoid them.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/www.pkf-attest.es\\\/en\\\/noticias\\\/mandas-datos-personales-por-email-sin-cifrar-enfrentarte-sancion-2\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/www.pkf-attest.es\\\/en\\\/noticias\\\/mandas-datos-personales-por-email-sin-cifrar-enfrentarte-sancion-2\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.pkf-attest.es\\\/en\\\/noticias\\\/mandas-datos-personales-por-email-sin-cifrar-enfrentarte-sancion-2\\\/#primaryimage\",\"url\":\"https:\\\/\\\/www.pkf-attest.es\\\/wp-content\\\/uploads\\\/2025\\\/05\\\/datos-personales-por-email-min-scaled.jpg\",\"contentUrl\":\"https:\\\/\\\/www.pkf-attest.es\\\/wp-content\\\/uploads\\\/2025\\\/05\\\/datos-personales-por-email-min-scaled.jpg\",\"width\":2560,\"height\":1709,\"caption\":\"Enviar datos personales por correo electr\u00f3nico sin cifrar puede acarrear una sanci\u00f3n\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/www.pkf-attest.es\\\/en\\\/noticias\\\/mandas-datos-personales-por-email-sin-cifrar-enfrentarte-sancion-2\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/www.pkf-attest.es\\\/en\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Do you send personal data by email? You could face a penalty\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/www.pkf-attest.es\\\/en\\\/#website\",\"url\":\"https:\\\/\\\/www.pkf-attest.es\\\/en\\\/\",\"name\":\"PKF Attest\",\"description\":\"PKF Attest\",\"publisher\":{\"@id\":\"https:\\\/\\\/www.pkf-attest.es\\\/en\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/www.pkf-attest.es\\\/en\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/www.pkf-attest.es\\\/en\\\/#organization\",\"name\":\"PKF-Attest\",\"url\":\"https:\\\/\\\/www.pkf-attest.es\\\/en\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.pkf-attest.es\\\/en\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/www.pkf-attest.es\\\/wp-content\\\/uploads\\\/2023\\\/12\\\/Logotipo_PKF-Attest-675x675-1.jpg\",\"contentUrl\":\"https:\\\/\\\/www.pkf-attest.es\\\/wp-content\\\/uploads\\\/2023\\\/12\\\/Logotipo_PKF-Attest-675x675-1.jpg\",\"width\":675,\"height\":675,\"caption\":\"PKF-Attest\"},\"image\":{\"@id\":\"https:\\\/\\\/www.pkf-attest.es\\\/en\\\/#\\\/schema\\\/logo\\\/image\\\/\"},\"sameAs\":[\"https:\\\/\\\/www.linkedin.com\\\/company\\\/1078028\\\/admin\\\/dashboard\\\/\"]}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"Do you send personal data by email? You could face a penalty","description":"The AEPD penalizes a pharmacy with 11,000 \u20ac for sending unencrypted personal data by email, in violation of the RGPD. Know the risks and how to avoid them.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.pkf-attest.es\/en\/noticias\/mandas-datos-personales-por-email-sin-cifrar-enfrentarte-sancion-2\/","og_locale":"en_US","og_type":"article","og_title":"Do you send personal data by email? You could face a penalty","og_description":"The AEPD penalizes a pharmacy with 11,000 \u20ac for sending unencrypted personal data by email, in violation of the RGPD. Know the risks and how to avoid them.","og_url":"https:\/\/www.pkf-attest.es\/en\/noticias\/mandas-datos-personales-por-email-sin-cifrar-enfrentarte-sancion-2\/","og_site_name":"PKF Attest","og_image":[{"width":2560,"height":1709,"url":"https:\/\/www.pkf-attest.es\/wp-content\/uploads\/2025\/05\/datos-personales-por-email-min-scaled.jpg","type":"image\/jpeg"}],"twitter_card":"summary_large_image","twitter_misc":{"Est. reading time":"3 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/www.pkf-attest.es\/en\/noticias\/mandas-datos-personales-por-email-sin-cifrar-enfrentarte-sancion-2\/","url":"https:\/\/www.pkf-attest.es\/en\/noticias\/mandas-datos-personales-por-email-sin-cifrar-enfrentarte-sancion-2\/","name":"Do you send personal data by email? You could face a penalty","isPartOf":{"@id":"https:\/\/www.pkf-attest.es\/en\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.pkf-attest.es\/en\/noticias\/mandas-datos-personales-por-email-sin-cifrar-enfrentarte-sancion-2\/#primaryimage"},"image":{"@id":"https:\/\/www.pkf-attest.es\/en\/noticias\/mandas-datos-personales-por-email-sin-cifrar-enfrentarte-sancion-2\/#primaryimage"},"thumbnailUrl":"https:\/\/www.pkf-attest.es\/wp-content\/uploads\/2025\/05\/datos-personales-por-email-min-scaled.jpg","datePublished":"2025-05-23T10:13:21+00:00","description":"The AEPD penalizes a pharmacy with 11,000 \u20ac for sending unencrypted personal data by email, in violation of the RGPD. Know the risks and how to avoid them.","breadcrumb":{"@id":"https:\/\/www.pkf-attest.es\/en\/noticias\/mandas-datos-personales-por-email-sin-cifrar-enfrentarte-sancion-2\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.pkf-attest.es\/en\/noticias\/mandas-datos-personales-por-email-sin-cifrar-enfrentarte-sancion-2\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.pkf-attest.es\/en\/noticias\/mandas-datos-personales-por-email-sin-cifrar-enfrentarte-sancion-2\/#primaryimage","url":"https:\/\/www.pkf-attest.es\/wp-content\/uploads\/2025\/05\/datos-personales-por-email-min-scaled.jpg","contentUrl":"https:\/\/www.pkf-attest.es\/wp-content\/uploads\/2025\/05\/datos-personales-por-email-min-scaled.jpg","width":2560,"height":1709,"caption":"Enviar datos personales por correo electr\u00f3nico sin cifrar puede acarrear una sanci\u00f3n"},{"@type":"BreadcrumbList","@id":"https:\/\/www.pkf-attest.es\/en\/noticias\/mandas-datos-personales-por-email-sin-cifrar-enfrentarte-sancion-2\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.pkf-attest.es\/en\/"},{"@type":"ListItem","position":2,"name":"Do you send personal data by email? You could face a penalty"}]},{"@type":"WebSite","@id":"https:\/\/www.pkf-attest.es\/en\/#website","url":"https:\/\/www.pkf-attest.es\/en\/","name":"PKF Attest","description":"PKF Attest","publisher":{"@id":"https:\/\/www.pkf-attest.es\/en\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.pkf-attest.es\/en\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/www.pkf-attest.es\/en\/#organization","name":"PKF-Attest","url":"https:\/\/www.pkf-attest.es\/en\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.pkf-attest.es\/en\/#\/schema\/logo\/image\/","url":"https:\/\/www.pkf-attest.es\/wp-content\/uploads\/2023\/12\/Logotipo_PKF-Attest-675x675-1.jpg","contentUrl":"https:\/\/www.pkf-attest.es\/wp-content\/uploads\/2023\/12\/Logotipo_PKF-Attest-675x675-1.jpg","width":675,"height":675,"caption":"PKF-Attest"},"image":{"@id":"https:\/\/www.pkf-attest.es\/en\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/www.linkedin.com\/company\/1078028\/admin\/dashboard\/"]}]}},"_links":{"self":[{"href":"https:\/\/www.pkf-attest.es\/en\/wp-json\/wp\/v2\/noticias\/35350","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.pkf-attest.es\/en\/wp-json\/wp\/v2\/noticias"}],"about":[{"href":"https:\/\/www.pkf-attest.es\/en\/wp-json\/wp\/v2\/types\/noticias"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.pkf-attest.es\/en\/wp-json\/wp\/v2\/media\/16816"}],"wp:attachment":[{"href":"https:\/\/www.pkf-attest.es\/en\/wp-json\/wp\/v2\/media?parent=35350"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.pkf-attest.es\/en\/wp-json\/wp\/v2\/categories?post=35350"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.pkf-attest.es\/en\/wp-json\/wp\/v2\/tags?post=35350"},{"taxonomy":"novedades_corporativa","embeddable":true,"href":"https:\/\/www.pkf-attest.es\/en\/wp-json\/wp\/v2\/novedades_corporativa?post=35350"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}