Spain

LÍNEA DIRECTA ASEGURADORA, S.A.

300,000 €

GDPR enforcement action by Spanish Data Protection Authority (aepd) on 2024-12-23.

Rank · Sector

#53

of 322 in Finance, Insurance and Consulting

Rank · Spain

#46

of 1,071

Rank · All fines

#301

of 3,042

Case details

Authority: Spanish Data Protection Authority (aepd)
Date: 2024-12-23
Controller / Processor: LÍNEA DIRECTA ASEGURADORA, S.A.
Sector: Finance, Insurance and Consulting
Quoted Articles: Art. 6 (1) GDPR, Art. 28 GDPR
Type of violation: Insufficient legal basis for data processing

Summary

The Spanish DPA has imposed a fine of EUR 300,000 on LÍNEA DIRECTA ASEGURADORA, S.A.. A data subject had filed a complaint with the DPA stating that they had inquired about a car insurance quote with Línea Directa and were subsequently contacted by one of Línea Directa's processors. Without their consent, the processor had accessed their driving license points via the website of a traffic authority.

Open original source Links to the regulator's original publication or another source.