The Spanish Data Protection Authority (AEPD) imposed a fine of 75.000 EUR on Telefónica Móviles España, S.A.U., for unlawfully processing the claimant’s personal data by charging them several invoices corresponding to a third person.
The claimant, who wasn’t a defendant’s client, contacted the controller in order to try to solve the situation, without success. The controller stated that, eventually, the invoices charged weren’t paid, and that the processing activity was carried out by the bank.
The AEPD considered that Telefónica Móviles España, S.A.U., violated Article 6(1) of the GDPR, by processing the claimant's personal data without any lawful basis, and consequently fined the controller.
For further information, please contact the Spanish DPA: firstname.lastname@example.org
The press release published here does not constitute official EDPB communication, nor an EDPB endorsement. This press release was originally published by the national supervisory authority and was published here at the request of the SA for information purposes. As the press release is represented here as it appeared on the SA's website or other channels of communication, the news item is only available in English or in the Member State's official language with a short introduction in English. Any questions regarding this press release should be directed to the supervisory authority concerned.