Spain

ASNEF-EQUIFAX, SERVICIOS DE INFORMACIÓN SOBRE SOLVENCIA Y CRÉDITO, S.L.

200,000 €

GDPR enforcement action by Spanish Data Protection Authority (aepd) on 2025-05-19.

Rank · Sector

#61

of 321 in Finance, Insurance and Consulting

Rank · Spain

#70

of 1,070

Rank · All fines

#366

of 3,039

Case details

Authority: Spanish Data Protection Authority (aepd)
Date: 2025-05-19
Controller / Processor: ASNEF-EQUIFAX, SERVICIOS DE INFORMACIÓN SOBRE SOLVENCIA Y CRÉDITO, S.L.
Sector: Finance, Insurance and Consulting
Quoted Articles: Art. 6 (1) GDPR, Art. 17 GDPR
Type of violation: Insufficient legal basis for data processing

Summary

The Spanish DPA imposed a fine of EUR 200,000 on ASNEF-EQUIFAX, SERVICIOS DE INFORMACIÓN SOBRE SOLVENCIA Y CRÉDITO, S.L. The controller obtained personal data from a third party without verifying its legality. This resulted in the controller processing the data without a sufficient legal basis. The controller also failed to sufficiently fulfil the a request for data erasure.

Open original source Links to the regulator's original publication or another source.