{"id":63353,"date":"2026-02-25T09:49:39","date_gmt":"2026-02-25T08:49:39","guid":{"rendered":"https:\/\/tecnolawyer.com\/subcontratacion-en-cadena-y-rgpd-15-000-e-por-olvidar-que-el-control-no-se-delega\/"},"modified":"2026-02-25T09:49:39","modified_gmt":"2026-02-25T08:49:39","slug":"subcontratacion-en-cadena-y-rgpd-15-000-e-por-olvidar-que-el-control-no-se-delega","status":"publish","type":"post","link":"https:\/\/tecnolawyer.com\/es\/subcontratacion-en-cadena-y-rgpd-15-000-e-por-olvidar-que-el-control-no-se-delega\/","title":{"rendered":"Subcontrataci\u00f3n en cadena y RGPD: 15.000 \u20ac por olvidar que el control no se delega"},"content":{"rendered":"\n<p><span data-contrast=\"auto\">La Agencia Espa\u00f1ola de Protecci\u00f3n de Datos (AEPD) ha sancionado a\u00a0<\/span><b><span data-contrast=\"auto\">DYNAMIC EXPRESS COURIER S.L.<\/span><\/b><span data-contrast=\"auto\">\u00a0con 15.000 euros por incumplimientos del art\u00edculo 28 del RGPD en el marco de un servicio de recogida documental para ING. La resoluci\u00f3n ofrece una lecci\u00f3n clara para cualquier organizaci\u00f3n que act\u00fae como encargado del tratamiento y recurra a terceros en la prestaci\u00f3n del servicio.<\/span><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335551550&quot;:6,&quot;335551620&quot;:6,&quot;335559738&quot;:120,&quot;335559739&quot;:120,&quot;335559740&quot;:240}\">\u00a0<\/span><\/p><br><p><span data-contrast=\"auto\">M\u00e1s all\u00e1 del extrav\u00edo de documentaci\u00f3n bancaria con datos altamente sensibles, el foco de la AEPD se sit\u00faa en algo estructural:\u00a0<\/span><b><span data-contrast=\"auto\">la gesti\u00f3n de la cadena de subcontrataci\u00f3n y el cumplimiento formal\u2014y material\u2014de las exigencias del art\u00edculo 28 RGPD<\/span><\/b><span data-contrast=\"auto\">.<\/span><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335551550&quot;:6,&quot;335551620&quot;:6,&quot;335559738&quot;:120,&quot;335559739&quot;:120,&quot;335559740&quot;:240}\">\u00a0<\/span><\/p><br><h2 aria-level=\"2\"><span style=\"color: #009abe;\">Los hechos: una cadena de\u00a0subencargos\u00a0sin control efectivo\u00a0<\/span><\/h2><br><p><span data-contrast=\"auto\">ING, como responsable del tratamiento, contrat\u00f3 a DYNAMIC como encargado para la recogida de documentaci\u00f3n de clientes. Durante la vigencia del contrato (1 de septiembre de 2022 a 28 de febrero de 2023), DYNAMIC recurri\u00f3 a SENDING como\u00a0subencargado.<\/span><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335551550&quot;:6,&quot;335551620&quot;:6,&quot;335559738&quot;:120,&quot;335559739&quot;:120,&quot;335559740&quot;:240}\">\u00a0<\/span><\/p><br><p><span data-contrast=\"auto\">A su vez, SENDING subcontrat\u00f3 a AUTORADIO para ejecutar materialmente la recogida de la documentaci\u00f3n. El problema no fue solo operativo (la documentaci\u00f3n nunca lleg\u00f3 a destino), sino jur\u00eddico:<\/span><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335551550&quot;:6,&quot;335551620&quot;:6,&quot;335559738&quot;:120,&quot;335559739&quot;:120,&quot;335559740&quot;:240}\">\u00a0<\/span><\/p><br><ul>\r\n\t<li aria-setsize=\"-1\" data-leveltext=\"\uf0b7\" data-font=\"Symbol\" data-listid=\"12\" data-list-defn-props=\"{&quot;335551500&quot;:1879524,&quot;335552541&quot;:1,&quot;335559685&quot;:720,&quot;335559991&quot;:360,&quot;469769226&quot;:&quot;Symbol&quot;,&quot;469769242&quot;:[8226],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;\uf0b7&quot;,&quot;469777815&quot;:&quot;multilevel&quot;}\" data-aria-posinset=\"1\" data-aria-level=\"1\"><b><span data-contrast=\"auto\">No constaba autorizaci\u00f3n previa y por escrito<\/span><\/b><span data-contrast=\"auto\">\u00a0de ING para contar con SENDING como\u00a0subencargado.<\/span><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335551550&quot;:6,&quot;335551620&quot;:6,&quot;335559738&quot;:120,&quot;335559739&quot;:120,&quot;335559740&quot;:240}\">\u00a0<\/span><\/li>\r\n<\/ul><br><ul>\r\n\t<li aria-setsize=\"-1\" data-leveltext=\"\uf0b7\" data-font=\"Symbol\" data-listid=\"12\" data-list-defn-props=\"{&quot;335551500&quot;:1879524,&quot;335552541&quot;:1,&quot;335559685&quot;:720,&quot;335559991&quot;:360,&quot;469769226&quot;:&quot;Symbol&quot;,&quot;469769242&quot;:[8226],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;\uf0b7&quot;,&quot;469777815&quot;:&quot;multilevel&quot;}\" data-aria-posinset=\"2\" data-aria-level=\"1\"><span data-contrast=\"auto\">Tampoco se acredit\u00f3 que ING hubiera sido informada de la intervenci\u00f3n de AUTORADIO.<\/span><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335551550&quot;:6,&quot;335551620&quot;:6,&quot;335559738&quot;:120,&quot;335559739&quot;:120,&quot;335559740&quot;:240}\">\u00a0<\/span><\/li>\r\n<\/ul><br><ul>\r\n\t<li aria-setsize=\"-1\" data-leveltext=\"\uf0b7\" data-font=\"Symbol\" data-listid=\"12\" data-list-defn-props=\"{&quot;335551500&quot;:1879524,&quot;335552541&quot;:1,&quot;335559685&quot;:720,&quot;335559991&quot;:360,&quot;469769226&quot;:&quot;Symbol&quot;,&quot;469769242&quot;:[8226],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;\uf0b7&quot;,&quot;469777815&quot;:&quot;multilevel&quot;}\" data-aria-posinset=\"3\" data-aria-level=\"1\"><span data-contrast=\"auto\">Los contratos de\u00a0subencargo\u00a0aportados no cumpl\u00edan plenamente con las exigencias del RGPD.<\/span><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335551550&quot;:6,&quot;335551620&quot;:6,&quot;335559738&quot;:120,&quot;335559739&quot;:120,&quot;335559740&quot;:240}\">\u00a0<\/span><\/li>\r\n<\/ul><br><p><span data-contrast=\"auto\">La AEPD declara probado que DYNAMIC ten\u00eda conocimiento de la intervenci\u00f3n de AUTORADIO y que no lo comunic\u00f3 al responsable.<\/span><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335551550&quot;:6,&quot;335551620&quot;:6,&quot;335559738&quot;:120,&quot;335559739&quot;:120,&quot;335559740&quot;:240}\">\u00a0<\/span><\/p><br><h2 aria-level=\"2\"><span style=\"color: #009abe;\">Art\u00edculo 28.2 RGPD: la autorizaci\u00f3n no es un formalismo\u00a0<\/span><\/h2><br><p><span data-contrast=\"auto\">El\u00a0<\/span><a href=\"https:\/\/www.boe.es\/doue\/2016\/119\/L00001-00088.pdf\" target=\"_blank\" rel=\"noopener\"><span data-contrast=\"none\">art\u00edculo 28.2 RGPD<\/span><\/a><span data-contrast=\"auto\">\u00a0establece que el encargado no podr\u00e1 recurrir a otro encargado sin la autorizaci\u00f3n previa, espec\u00edfica o general, del responsable.<\/span><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335551550&quot;:6,&quot;335551620&quot;:6,&quot;335559738&quot;:120,&quot;335559739&quot;:120,&quot;335559740&quot;:240}\">\u00a0<\/span><\/p><br><p><span data-contrast=\"auto\">En este caso, el contrato entre ING y DYNAMIC exig\u00eda autorizaci\u00f3n previa y expresa para subcontratar. Sin embargo, no constaba autorizaci\u00f3n para SENDING ni comunicaci\u00f3n relativa a AUTORADIO.<\/span><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335551550&quot;:6,&quot;335551620&quot;:6,&quot;335559738&quot;:120,&quot;335559739&quot;:120,&quot;335559740&quot;:240}\">\u00a0<\/span><\/p><br><p><span data-contrast=\"auto\">La AEPD aprecia dos infracciones del art\u00edculo 28.2 RGPD:<\/span><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335551550&quot;:6,&quot;335551620&quot;:6,&quot;335559738&quot;:120,&quot;335559739&quot;:120,&quot;335559740&quot;:240}\">\u00a0<\/span><\/p><br><ul>\r\n\t<li aria-setsize=\"-1\" data-leveltext=\"\uf0b7\" data-font=\"Symbol\" data-listid=\"9\" data-list-defn-props=\"{&quot;335551500&quot;:1879524,&quot;335552541&quot;:1,&quot;335559685&quot;:720,&quot;335559991&quot;:360,&quot;469769226&quot;:&quot;Symbol&quot;,&quot;469769242&quot;:[8226],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;\uf0b7&quot;,&quot;469777815&quot;:&quot;multilevel&quot;}\" data-aria-posinset=\"1\" data-aria-level=\"1\"><span data-contrast=\"auto\">Subencargar\u00a0sin autorizaci\u00f3n previa y por escrito.<\/span><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335551550&quot;:6,&quot;335551620&quot;:6,&quot;335559738&quot;:120,&quot;335559739&quot;:120,&quot;335559740&quot;:240}\">\u00a0<\/span><\/li>\r\n<\/ul><br><ul>\r\n\t<li aria-setsize=\"-1\" data-leveltext=\"\uf0b7\" data-font=\"Symbol\" data-listid=\"9\" data-list-defn-props=\"{&quot;335551500&quot;:1879524,&quot;335552541&quot;:1,&quot;335559685&quot;:720,&quot;335559991&quot;:360,&quot;469769226&quot;:&quot;Symbol&quot;,&quot;469769242&quot;:[8226],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;\uf0b7&quot;,&quot;469777815&quot;:&quot;multilevel&quot;}\" data-aria-posinset=\"2\" data-aria-level=\"1\"><span data-contrast=\"auto\">No informar al responsable sobre cambios en la cadena de subcontrataci\u00f3n.<\/span><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335551550&quot;:6,&quot;335551620&quot;:6,&quot;335559738&quot;:120,&quot;335559739&quot;:120,&quot;335559740&quot;:240}\">\u00a0<\/span><\/li>\r\n<\/ul><br><p><span data-contrast=\"auto\">El mensaje es claro: el responsable debe poder\u00a0<\/span><b><span data-contrast=\"auto\">conocer, controlar y, en su caso, oponerse<\/span><\/b><span data-contrast=\"auto\">\u00a0a los\u00a0subencargados\u00a0que intervienen en el tratamiento.<\/span><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335551550&quot;:6,&quot;335551620&quot;:6,&quot;335559738&quot;:120,&quot;335559739&quot;:120,&quot;335559740&quot;:240}\">\u00a0<\/span><\/p><br><h2 aria-level=\"2\"><span style=\"color: #009abe;\">Art\u00edculo 28.4 RGPD: el contrato de\u00a0subencargo\u00a0debe ser adecuado\u00a0<\/span><\/h2><br><p><span data-contrast=\"auto\">La resoluci\u00f3n tambi\u00e9n analiza el art\u00edculo 28.4 RGPD, que exige que el\u00a0subencargado\u00a0asuma las mismas obligaciones en materia de protecci\u00f3n de datos que las establecidas entre responsable y encargado.<\/span><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335551550&quot;:6,&quot;335551620&quot;:6,&quot;335559738&quot;:120,&quot;335559739&quot;:120,&quot;335559740&quot;:240}\">\u00a0<\/span><\/p><br><p><span data-contrast=\"auto\">Los contratos entre DYNAMIC y SENDING presentaban deficiencias relevantes: no identificaban correctamente al responsable (ING) y no reflejaban adecuadamente el marco contractual espec\u00edfico.<\/span><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335551550&quot;:6,&quot;335551620&quot;:6,&quot;335559738&quot;:120,&quot;335559739&quot;:120,&quot;335559740&quot;:240}\">\u00a0<\/span><\/p><br><p><span data-contrast=\"auto\">La AEPD concluye que no basta con tener\u00a0\u00abalg\u00fan contrato\u00bb\u00a0de protecci\u00f3n de datos. El contenido debe ajustarse al RGPD y a las instrucciones concretas del responsable.<\/span><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335551550&quot;:6,&quot;335551620&quot;:6,&quot;335559738&quot;:120,&quot;335559739&quot;:120,&quot;335559740&quot;:240}\">\u00a0<\/span><\/p><br><h2 aria-level=\"2\"><span style=\"color: #009abe;\">La sanci\u00f3n: tres infracciones, 15.000 euros\u00a0<\/span><\/h2><br><p><span data-contrast=\"auto\">Finalmente, la AEPD impone:<\/span><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335551550&quot;:6,&quot;335551620&quot;:6,&quot;335559738&quot;:120,&quot;335559739&quot;:120,&quot;335559740&quot;:240}\">\u00a0<\/span><\/p><br><ul>\r\n\t<li aria-setsize=\"-1\" data-leveltext=\"\uf0b7\" data-font=\"Symbol\" data-listid=\"10\" data-list-defn-props=\"{&quot;335551500&quot;:1879524,&quot;335552541&quot;:1,&quot;335559685&quot;:720,&quot;335559991&quot;:360,&quot;469769226&quot;:&quot;Symbol&quot;,&quot;469769242&quot;:[8226],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;\uf0b7&quot;,&quot;469777815&quot;:&quot;multilevel&quot;}\" data-aria-posinset=\"1\" data-aria-level=\"1\"><span data-contrast=\"auto\">5.000 \u20ac por\u00a0subencargar\u00a0a SENDING sin autorizaci\u00f3n (<\/span><a href=\"https:\/\/www.boe.es\/doue\/2016\/119\/L00001-00088.pdf\" target=\"_blank\" rel=\"noopener\"><span data-contrast=\"none\">art. 28.2 RGPD<\/span><\/a><span data-contrast=\"auto\">).<\/span><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335551550&quot;:6,&quot;335551620&quot;:6,&quot;335559738&quot;:120,&quot;335559739&quot;:120,&quot;335559740&quot;:240}\">\u00a0<\/span><\/li>\r\n<\/ul><br><ul>\r\n\t<li aria-setsize=\"-1\" data-leveltext=\"\uf0b7\" data-font=\"Symbol\" data-listid=\"10\" data-list-defn-props=\"{&quot;335551500&quot;:1879524,&quot;335552541&quot;:1,&quot;335559685&quot;:720,&quot;335559991&quot;:360,&quot;469769226&quot;:&quot;Symbol&quot;,&quot;469769242&quot;:[8226],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;\uf0b7&quot;,&quot;469777815&quot;:&quot;multilevel&quot;}\" data-aria-posinset=\"2\" data-aria-level=\"1\"><span data-contrast=\"auto\">5.000 \u20ac por no informar sobre la intervenci\u00f3n de AUTORADIO (<\/span><a href=\"https:\/\/www.boe.es\/doue\/2016\/119\/L00001-00088.pdf\" target=\"_blank\" rel=\"noopener\"><span data-contrast=\"none\">art. 28.2 RGPD<\/span><\/a><span data-contrast=\"auto\">).<\/span><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335551550&quot;:6,&quot;335551620&quot;:6,&quot;335559738&quot;:120,&quot;335559739&quot;:120,&quot;335559740&quot;:240}\">\u00a0<\/span><\/li>\r\n<\/ul><br><ul>\r\n\t<li aria-setsize=\"-1\" data-leveltext=\"\uf0b7\" data-font=\"Symbol\" data-listid=\"10\" data-list-defn-props=\"{&quot;335551500&quot;:1879524,&quot;335552541&quot;:1,&quot;335559685&quot;:720,&quot;335559991&quot;:360,&quot;469769226&quot;:&quot;Symbol&quot;,&quot;469769242&quot;:[8226],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;\uf0b7&quot;,&quot;469777815&quot;:&quot;multilevel&quot;}\" data-aria-posinset=\"3\" data-aria-level=\"1\"><span data-contrast=\"auto\">5.000 \u20ac por no contar con un contrato de\u00a0subencargo\u00a0v\u00e1lido con SENDING (<\/span><a href=\"https:\/\/www.boe.es\/doue\/2016\/119\/L00001-00088.pdf\" target=\"_blank\" rel=\"noopener\"><span data-contrast=\"none\">art. 28.4 RGPD<\/span><\/a><span data-contrast=\"auto\">).<\/span><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335551550&quot;:6,&quot;335551620&quot;:6,&quot;335559738&quot;:120,&quot;335559739&quot;:120,&quot;335559740&quot;:240}\">\u00a0<\/span><\/li>\r\n<\/ul><br><p><span data-contrast=\"auto\">Total: 15.000 euros.<\/span><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335551550&quot;:6,&quot;335551620&quot;:6,&quot;335559738&quot;:120,&quot;335559739&quot;:120,&quot;335559740&quot;:240}\">\u00a0<\/span><\/p><br><h2 aria-level=\"2\"><span style=\"color: #009abe;\">Conclusi\u00f3n: la responsabilidad en cadena tambi\u00e9n es responsabilidad jur\u00eddica\u00a0<\/span><\/h2><br><p><span data-contrast=\"auto\">Esta resoluci\u00f3n recuerda que\u00a0<\/span><b><span data-contrast=\"auto\">el art\u00edculo 28 RGPD no es una cl\u00e1usula est\u00e1ndar que se copia y pega en los contratos<\/span><\/b><span data-contrast=\"auto\">. Es un mecanismo esencial para garantizar que los derechos de los interesados se preserven a lo largo de toda la cadena de tratamiento.<\/span><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335551550&quot;:6,&quot;335551620&quot;:6,&quot;335559738&quot;:120,&quot;335559739&quot;:120,&quot;335559740&quot;:240}\">\u00a0<\/span><\/p><br><p><span data-contrast=\"auto\">Para responsables y encargados, la lecci\u00f3n es evidente:<\/span><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335551550&quot;:6,&quot;335551620&quot;:6,&quot;335559738&quot;:120,&quot;335559739&quot;:120,&quot;335559740&quot;:240}\">\u00a0<\/span><\/p><br><ul>\r\n\t<li aria-setsize=\"-1\" data-leveltext=\"\uf0b7\" data-font=\"Symbol\" data-listid=\"11\" data-list-defn-props=\"{&quot;335551500&quot;:1879524,&quot;335552541&quot;:1,&quot;335559685&quot;:720,&quot;335559991&quot;:360,&quot;469769226&quot;:&quot;Symbol&quot;,&quot;469769242&quot;:[8226],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;\uf0b7&quot;,&quot;469777815&quot;:&quot;multilevel&quot;}\" data-aria-posinset=\"1\" data-aria-level=\"1\"><span data-contrast=\"auto\">Identificar y documentar todos los\u00a0subencargados.<\/span><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335551550&quot;:6,&quot;335551620&quot;:6,&quot;335559738&quot;:120,&quot;335559739&quot;:120,&quot;335559740&quot;:240}\">\u00a0<\/span><\/li>\r\n<\/ul><br><ul>\r\n\t<li aria-setsize=\"-1\" data-leveltext=\"\uf0b7\" data-font=\"Symbol\" data-listid=\"11\" data-list-defn-props=\"{&quot;335551500&quot;:1879524,&quot;335552541&quot;:1,&quot;335559685&quot;:720,&quot;335559991&quot;:360,&quot;469769226&quot;:&quot;Symbol&quot;,&quot;469769242&quot;:[8226],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;\uf0b7&quot;,&quot;469777815&quot;:&quot;multilevel&quot;}\" data-aria-posinset=\"2\" data-aria-level=\"1\"><span data-contrast=\"auto\">Exigir autorizaci\u00f3n previa cuando as\u00ed se establezca.<\/span><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335551550&quot;:6,&quot;335551620&quot;:6,&quot;335559738&quot;:120,&quot;335559739&quot;:120,&quot;335559740&quot;:240}\">\u00a0<\/span><\/li>\r\n<\/ul><br><ul>\r\n\t<li aria-setsize=\"-1\" data-leveltext=\"\uf0b7\" data-font=\"Symbol\" data-listid=\"11\" data-list-defn-props=\"{&quot;335551500&quot;:1879524,&quot;335552541&quot;:1,&quot;335559685&quot;:720,&quot;335559991&quot;:360,&quot;469769226&quot;:&quot;Symbol&quot;,&quot;469769242&quot;:[8226],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;\uf0b7&quot;,&quot;469777815&quot;:&quot;multilevel&quot;}\" data-aria-posinset=\"3\" data-aria-level=\"1\"><span data-contrast=\"auto\">Formalizar contratos plenamente alineados con el RGPD.<\/span><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335551550&quot;:6,&quot;335551620&quot;:6,&quot;335559738&quot;:120,&quot;335559739&quot;:120,&quot;335559740&quot;:240}\">\u00a0<\/span><\/li>\r\n<\/ul><br><ul>\r\n\t<li aria-setsize=\"-1\" data-leveltext=\"\uf0b7\" data-font=\"Symbol\" data-listid=\"11\" data-list-defn-props=\"{&quot;335551500&quot;:1879524,&quot;335552541&quot;:1,&quot;335559685&quot;:720,&quot;335559991&quot;:360,&quot;469769226&quot;:&quot;Symbol&quot;,&quot;469769242&quot;:[8226],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;\uf0b7&quot;,&quot;469777815&quot;:&quot;multilevel&quot;}\" data-aria-posinset=\"4\" data-aria-level=\"1\"><span data-contrast=\"auto\">Mantener trazabilidad y control real sobre la cadena de proveedores.<\/span><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335551550&quot;:6,&quot;335551620&quot;:6,&quot;335559738&quot;:120,&quot;335559739&quot;:120,&quot;335559740&quot;:240}\">\u00a0<\/span><\/li>\r\n<\/ul><br><p><span data-contrast=\"auto\">En protecci\u00f3n de datos,\u00a0<\/span><b><span data-contrast=\"auto\">delegar la prestaci\u00f3n del servicio no implica delegar la responsabilidad<\/span><\/b><span data-contrast=\"auto\">. Y cuando el control se diluye en la cadena de subcontrataci\u00f3n, el riesgo\u2014jur\u00eddico y reputacional\u2014se multiplica.<\/span><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335551550&quot;:6,&quot;335551620&quot;:6,&quot;335559738&quot;:120,&quot;335559739&quot;:120,&quot;335559740&quot;:240}\">\u00a0<\/span><\/p><br><p><span data-contrast=\"auto\">Como siempre, cuidad los datos y \u00a1cuidaos!<\/span><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335551550&quot;:6,&quot;335551620&quot;:6,&quot;335559738&quot;:120,&quot;335559739&quot;:120,&quot;335559740&quot;:240}\">\u00a0<\/span><\/p><br><p><span data-contrast=\"auto\">Para leer la resoluci\u00f3n, haga clic\u00a0<\/span><a href=\"https:\/\/www.aepd.es\/documento\/ps-00080-2024.pdf\" target=\"_blank\" rel=\"noopener\"><span data-contrast=\"none\">aqu\u00ed<\/span><\/a><span data-contrast=\"auto\">.<\/span><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335551550&quot;:6,&quot;335551620&quot;:6,&quot;335559738&quot;:120,&quot;335559739&quot;:120,&quot;335559740&quot;:240}\">\u00a0<\/span><\/p>\n","protected":false},"excerpt":{"rendered":"<p>La Agencia Espa\u00f1ola de Protecci\u00f3n de Datos (AEPD) ha sancionado a\u00a0DYNAMIC EXPRESS COURIER S.L.\u00a0con 15.000 euros por incumplimientos del art\u00edculo ... <a title=\"Subcontrataci\u00f3n en cadena y RGPD: 15.000 \u20ac por olvidar que el control no se delega\" class=\"read-more\" href=\"https:\/\/tecnolawyer.com\/es\/subcontratacion-en-cadena-y-rgpd-15-000-e-por-olvidar-que-el-control-no-se-delega\/\" aria-label=\"Leer m\u00e1s sobre Subcontrataci\u00f3n en cadena y RGPD: 15.000 \u20ac por olvidar que el control no se delega\">Leer m\u00e1s<\/a><\/p>\n","protected":false},"author":2,"featured_media":63352,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"inline_featured_image":false,"generate_page_header":"","footnotes":""},"categories":[251,252],"tags":[],"class_list":["post-63353","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-derecho-empresa-entornos-digitales-es","category-privacidad-proteccion_datos-es","generate-columns","tablet-grid-50","mobile-grid-100","grid-parent","grid-50"],"_links":{"self":[{"href":"https:\/\/tecnolawyer.com\/es\/wp-json\/wp\/v2\/posts\/63353","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/tecnolawyer.com\/es\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/tecnolawyer.com\/es\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/tecnolawyer.com\/es\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/tecnolawyer.com\/es\/wp-json\/wp\/v2\/comments?post=63353"}],"version-history":[{"count":1,"href":"https:\/\/tecnolawyer.com\/es\/wp-json\/wp\/v2\/posts\/63353\/revisions"}],"predecessor-version":[{"id":63354,"href":"https:\/\/tecnolawyer.com\/es\/wp-json\/wp\/v2\/posts\/63353\/revisions\/63354"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/tecnolawyer.com\/es\/wp-json\/wp\/v2\/media\/63352"}],"wp:attachment":[{"href":"https:\/\/tecnolawyer.com\/es\/wp-json\/wp\/v2\/media?parent=63353"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/tecnolawyer.com\/es\/wp-json\/wp\/v2\/categories?post=63353"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/tecnolawyer.com\/es\/wp-json\/wp\/v2\/tags?post=63353"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}