The Spanish Data Protection Authority (AEPD) imposed a fine of 75.000 EUR on Telefónica Móviles España, S.A.U., for unlawfully processing the claimant’s personal data by charging them several invoices corresponding to a third person.
The claimant, who wasn’t a defendant’s client, contacted the controller in order to try to solve the situation, without success. The controller stated that, eventually, the invoices charged weren’t paid, and that the processing activity was carried out by the bank.
The AEPD considered that Telefónica Móviles España, S.A.U., violated Article 6(1) of the GDPR, by processing the claimant's personal data without any lawful basis, and consequently fined the controller.
For further information, please contact the Spanish DPA: prensa@aepd.es