AEPD Resolution on Rights Procedure and Labor Dispute
Summary
The Spanish Data Protection Agency (AEPD) has issued a resolution regarding a data rights procedure initiated on June 2, 2025. The case involves a former employee's claims against FENG SHENG SUSHI, S.L. concerning alleged falsification of a labor contract, denial of access to personal data, and improper use of banking information.
What changed
The Spanish Data Protection Agency (AEPD) has issued a resolution (EXP202512375 / PD/00337/2025) concerning a data rights procedure filed on June 2, 2025. The claimant alleges that FENG SHENG SUSHI, S.L. violated their data protection rights by presenting a falsified labor contract dated February 23, 2024, failing to provide a copy of the contract upon request, and improperly using their banking data for a settlement transfer without prior agreement. The claimant also asserts denial of access to personal data from a video surveillance system used in accusations preceding their dismissal.
This resolution signifies an active investigation into potential violations of data protection laws, specifically the right of access and lawful processing of personal data. Regulated entities, particularly employers, should ensure robust procedures for handling data access requests, maintaining accurate employment records, and obtaining explicit consent for data processing activities. Failure to comply with data protection regulations can lead to investigations, corrective measures, and potential sanctions by the AEPD.
What to do next
- Review procedures for handling data access requests.
- Ensure all employment contracts and data processing activities are legally compliant and properly documented.
- Verify the lawful basis for all personal data processing, especially concerning financial and sensitive information.
Source document
Related changes
Source
Classification
Who this affects
Taxonomy
Browse Categories
Get Data Protection alerts
Weekly digest. AI-summarized, no noise.
Free. Unsubscribe anytime.