Spain

CAIXABANK PAYMENTS & CONSUMER EFC, EP, S.A.U.

70,000 €

GDPR enforcement action by Spanish Data Protection Authority (aepd) on 2023-03-21.

Rank · Sector

#110

of 322 in Finance, Insurance and Consulting

Rank · Spain

#150

of 1,075

Rank · All fines

#588

of 3,050

Case details

Authority: Spanish Data Protection Authority (aepd)
Date: 2023-03-21
Controller / Processor: CAIXABANK PAYMENTS & CONSUMER EFC, EP, S.A.U.
Sector: Finance, Insurance and Consulting
Quoted Articles: Art. 6 (1) GDPR
Type of violation: Insufficient legal basis for data processing

Summary

The Spanish DPA has imposed a fine of EUR 70,000 on CAIXABANK PAYMENTS & CONSUMER EFC, EP, S.A.U.. The data subject had received a message from a debt collection company on behalf of Caixabank requesting payment of outstanding debts. However, the debt had been annulled, which was also confirmed in a court ruling. For this reason, the DPA determined that the disclosure of the data subject's personal data for the purpose of contacting them regarding the settlement of the debt was unlawful.

Open original source Links to the regulator's original publication or another source.