Xfera Moviles S.A.
€30,000
Insufficient technical and organisational measures to ensure information security
Decision Date
February 14, 2020
Authority
Spanish Data Protection Authority (aepd)
ES
Sector
Media, Telecoms and Broadcasting
Country
ES
Law
GDPRStatus
FINALDescription
The AEPD found that a third party had access to the name, telephone number and address of another customer.
Legal Citations
Art. 5 (1)Art. 32
Issues & Violations
Insufficient technical and organisational measures to ensure information security