Spain
Xfera Moviles S.A.
30,000 €
GDPR enforcement action by Spanish Data Protection Authority (aepd) on 2020-02-14.
Rank · Sector
#245
of 366 in Media, Telecoms and Broadcasting
Rank · Spain
#294
of 1,070
Rank · All fines
#875
of 3,039
Case details
- Authority
- Spanish Data Protection Authority (aepd)
- Date
- 2020-02-14
- Controller / Processor
- Xfera Moviles S.A.
- Sector
- Media, Telecoms and Broadcasting
- Quoted Articles
- Art. 5 (1) f) GDPR, Art. 32 GDPR
- Type of violation
- Insufficient technical and organisational measures to ensure information security
Summary
The AEPD found that a third party had access to the name, telephone number and address of another customer.
Open original source
Links to the regulator's original publication or another source.
Related fines
Spain
2025-11-06
10,043,002 €
ETid-2962
Aena, S.M.E., S.A.
Transportation and Energy
Spain
2022-05-18
10,000,000 €
ETid-1176
Google LLC
Media, Telecoms and Broadcasting
Spain
2021-03-11
8,150,000 €
ETid-594
Vodafone España, S.A.U.
Media, Telecoms and Broadcasting
Spain
2023-12-27
6,500,000 €
ETid-2532
THE PHONE HOUSE SPAIN, S.L.
Media, Telecoms and Broadcasting
Spain
2023-10-25
6,100,000 €
ETid-2220
ENDESA ENERGÍA, S.A.U.
Transportation and Energy
Spain
2020-12-11
5,000,000 €
ETid-481
Banco Bilbao Vizcaya Argentaria, S.A.
Finance, Insurance and Consulting