Spain

Working Capital Management España, S.L.

40,000 €

GDPR enforcement action by Spanish Data Protection Authority (aepd) on 2022-04-28.

Rank · Sector

#138

of 322 in Finance, Insurance and Consulting

Rank · Spain

#277

of 1,075

Rank · All fines

#812

of 3,050

Case details

Authority: Spanish Data Protection Authority (aepd)
Date: 2022-04-28
Controller / Processor: Working Capital Management España, S.L.
Sector: Finance, Insurance and Consulting
Quoted Articles: Art. 6 (1) GDPR
Type of violation: Insufficient legal basis for data processing

Summary

The Spanish DPA (AEPD) has imposed a fine of EUR 40,000 on the credit information agency Working Capital Management España, S.L.. A data subject had filed a complaint with the AEPD against the company. Fraudulent third parties had taken out a loan with NBQ Technology, S.A.U. in the name of the data subject without the data subject actually entering into a contract. After the data subject subsequently did not make payments, NBQ disclosed the data subject's information to Working Capital Management. The AEPD determined that Working Capital Management, has processed the data subjects data illegally since the personal data was entered into the company's information systems without checking whether the data subject had given their consent to the processing of their personal data.

Open original source Links to the regulator's original publication or another source.