Spain

Master Distancia S.A.

20,000 €

GDPR enforcement action by Spanish Data Protection Authority (aepd) on 2021-06-07.

Rank · Sector

#123

of 357 in Public Sector and Education

Rank · Spain

#337

of 1,075

Rank · All fines

#1,043

of 3,050

Case details

Authority: Spanish Data Protection Authority (aepd)
Date: 2021-06-07
Controller / Processor: Master Distancia S.A.
Sector: Public Sector and Education
Quoted Articles: Art. 6 (1) GDPR
Type of violation: Insufficient legal basis for data processing

Summary

The Spanish DPA (AEPD) has imposed a fine of EUR 25,000 on Master Distancia S.A.. The controller had included personal data of the data subject in a credit report register without sufficient legal basis. The controller justified this with alleged debts the data subject had with the controller. In fact, however, the parties were still in arbitration. Accordingly, the controller had no authorization to include the data subject's data in the register. The original fine of EUR 25,000 was reduced to EUR 20,000 due to immediate payment.

Open original source Links to the regulator's original publication or another source.