Spain

Xfera Moviles S.A.

70,000 €

GDPR enforcement action by Spanish Data Protection Authority (aepd) on 2020-07-20.

Rank · Sector

#135

of 369 in Media, Telecoms and Broadcasting

Rank · Spain

#143

of 1,075

Rank · All fines

#577

of 3,050

Case details

Authority: Spanish Data Protection Authority (aepd)
Date: 2020-07-20
Controller / Processor: Xfera Moviles S.A.
Sector: Media, Telecoms and Broadcasting
Quoted Articles: Art. 5 GDPR
Type of violation: Non-compliance with general data processing principles

Summary

A data subject had received a call from another Xfera Móviles customer who stated that the company had charged his bank account with an invoice, disclosing the personal details of the other data subject. This was due to an error on the part of Xfera Móviles and was therefore a violation of the principles of integrity and confidentiality.

Open original source Links to the regulator's original publication or another source.