Spain

DIGI SPAIN TELECOM, S.L.U.

150,000 €

GDPR enforcement action by Spanish Data Protection Authority (aepd) on 2025-09-17.

Rank · Sector

#99

of 366 in Media, Telecoms and Broadcasting

Rank · Spain

#82

of 1,071

Rank · All fines

#411

of 3,042

Case details

Authority: Spanish Data Protection Authority (aepd)
Date: 2025-09-17
Controller / Processor: DIGI SPAIN TELECOM, S.L.U.
Sector: Media, Telecoms and Broadcasting
Quoted Articles: Art. 6 (1) GDPR
Type of violation: Insufficient legal basis for data processing

Summary

The Spanish DPA has imposed a fine of EUR 150,000 on Digi Spain Telecom S.L.U. The controller rejected the application for a contract due to outstanding debt, despite this being untrue as the applicant had been the victim of identity theft. During the verification process and the decision-making process regarding acceptance of the application, data was processed without a sufficient legal basis.

Open original source Links to the regulator's original publication or another source.