Spain

PRA Iberia S.L.

60,000 €

GDPR enforcement action by Spanish Data Protection Authority (aepd) on 2021-07-27.

Rank · Sector

#117

of 322 in Finance, Insurance and Consulting

Rank · Spain

#189

of 1,075

Rank · All fines

#642

of 3,050

Case details

Authority: Spanish Data Protection Authority (aepd)
Date: 2021-07-27
Controller / Processor: PRA Iberia S.L.
Sector: Finance, Insurance and Consulting
Quoted Articles: Art. 6 (1) GDPR, Art. 15 GDPR
Type of violation: Insufficient legal basis for data processing

Summary

The Spanish DPA (AEPD) has fined PRA Iberia S.L. EUR 60,000. A data subject had filed a complaint against the controller with the AEPD. The complaint was based on the fact that the controller asserted a claim arising from a contract that the data subject had never concluded and of which he had no knowledge. The AEPD points out that the data subject had attempted to exercise his right to information, but received no response from the controller, that instead continued to add interest to the data subject's alleged debt.

Open original source Links to the regulator's original publication or another source.