Xfera Moviles S.A.
€55,000
Insufficient technical and organisational measures to ensure information security
Päätöspäivä
10. heinäkuuta 2020
Viranomainen
Spanish Data Protection Authority (aepd)
ES
Ala
Media, Telecoms and Broadcasting
Maa
ES
Laki
GDPRTila
FINALKuvaus
The company had changed a contract for a mobile phone connection to a new owner, whereby the personal data of a data subject such as his address and telephone numbers were freely accessible. This constituted a violation of the principles of confidentiality and integrity.
Oikeudelliset viittaukset
Art. 5Art. 32
Asiat ja rikkomukset
Insufficient technical and organisational measures to ensure information security