Spain

Telefónica Móviles España, SAU

70,000 €

GDPR enforcement action by Spanish Data Protection Authority (aepd) on 2020-07-23.

Rank · Sector

#138

of 371 in Media, Telecoms and Broadcasting

Rank · Spain

#147

of 1,079

Rank · All fines

#589

of 3,085

Case details

Authority: Spanish Data Protection Authority (aepd)
Date: 2020-07-23
Controller / Processor: Telefónica Móviles España, SAU
Sector: Media, Telecoms and Broadcasting
Quoted Articles: Art. 5 GDPR, Art. 6 GDPR
Type of violation: Insufficient legal basis for data processing

Summary

The data subject's account was debited for two telephone lines that he had never ordered or approved. This constituted unlawful processing of personal data, since the data subject's information was stored in the information systems of Telefónica Móviles España without a legal basis for invoicing.

Open original source Links to the regulator's original publication or another source.