Spain

CAIXABANK PAYMENTS & CONSUMER EFC, EP, S.A.U.

200,000 €

GDPR enforcement action by Spanish Data Protection Authority (aepd) on 2023-11-13.

Rank · Sector

#58

of 322 in Finance, Insurance and Consulting

Rank · Spain

#59

of 1,075

Rank · All fines

#355

of 3,050

Case details

Authority: Spanish Data Protection Authority (aepd)
Date: 2023-11-13
Controller / Processor: CAIXABANK PAYMENTS & CONSUMER EFC, EP, S.A.U.
Sector: Finance, Insurance and Consulting
Quoted Articles: Art. 6 GDPR
Type of violation: Insufficient legal basis for data processing

Summary

The Spanish DPA has imposed a fine of EUR 200,000 on CAIXABANK PAYMENTS & CONSUMER EFC, EP, S.A.U.. The controller had included the data subject's personal data in a credit reporting register without a sufficient legal basis. The controller justified this with alleged debts that the data subject had with the controller. In fact, however, the parties were still involved in ongoing court proceedings.

Open original source Links to the regulator's original publication or another source.