Spain

Xfera Moviles S.A.

55,000 €

GDPR enforcement action by Spanish Data Protection Authority (aepd) on 2020-07-10.

Rank · Sector

#184

of 369 in Media, Telecoms and Broadcasting

Rank · Spain

#213

of 1,075

Rank · All fines

#673

of 3,050

Case details

Authority: Spanish Data Protection Authority (aepd)
Date: 2020-07-10
Controller / Processor: Xfera Moviles S.A.
Sector: Media, Telecoms and Broadcasting
Quoted Articles: Art. 5 GDPR, Art. 32 GDPR
Type of violation: Insufficient technical and organisational measures to ensure information security

Summary

The company had changed a contract for a mobile phone connection to a new owner, whereby the personal data of a data subject such as his address and telephone numbers were freely accessible. This constituted a violation of the principles of confidentiality and integrity.

Open original source Links to the regulator's original publication or another source.