Spain

Telefónica Móviles España, SAU

70,000 €

GDPR enforcement action by Spanish Data Protection Authority (aepd) on 2020-07-23.

Rank · Sector

#136

of 369 in Media, Telecoms and Broadcasting

Rank · Spain

#144

of 1,075

Rank · All fines

#578

of 3,050

Case details

Authority: Spanish Data Protection Authority (aepd)
Date: 2020-07-23
Controller / Processor: Telefónica Móviles España, SAU
Sector: Media, Telecoms and Broadcasting
Quoted Articles: Art. 5 GDPR, Art. 6 GDPR
Type of violation: Insufficient legal basis for data processing

Summary

The data subject's account was debited for two telephone lines that he had never ordered or approved. This constituted unlawful processing of personal data, since the data subject's information was stored in the information systems of Telefónica Móviles España without a legal basis for invoicing.

Open original source Links to the regulator's original publication or another source.