Spain

Orange Espagne S.A.U.

80,000 €

GDPR enforcement action by Spanish Data Protection Authority (aepd) on 2020-07-20.

Rank · Sector

#121

of 369 in Media, Telecoms and Broadcasting

Rank · Spain

#120

of 1,075

Rank · All fines

#527

of 3,050

Case details

Authority: Spanish Data Protection Authority (aepd)
Date: 2020-07-20
Controller / Processor: Orange Espagne S.A.U.
Sector: Media, Telecoms and Broadcasting
Quoted Articles: Art. 5 GDPR, Art. 6 GDPR
Type of violation: Insufficient legal basis for data processing

Summary

The company had unlawfully activated several telephone line contracts using the personal data of a data subject. This constituted an unlawful processing operation, since the data of the data subject was entered into the company's database and processed there without a legitimate legal basis.

Open original source Links to the regulator's original publication or another source.