The Spanish DPA (AEPD) has imposed a fine of EUR 3,500 on MAD cool FESTIVAL S.L. The control suffered a data breach due to insufficient technical and organizational measures. The total fine consists of a fine of EUR 2,000 for infringing on Art. 5(1)(f) GDPR, and EUR 1,500 for the violation of Art. 32 GDPR. The add sum can be reduced by 20% (resulting in a fine of EUR 2,800) with timely payment.