Xfera Moviles S.A.
€70,000
Non-compliance with general data processing principles
Decision Date
20 de julho de 2020
Authority
Spanish Data Protection Authority (aepd)
ES
Sector
Media, Telecoms and Broadcasting
Country
ES
Law
GDPRStatus
FINALDescription
A data subject had received a call from another Xfera Móviles customer who stated that the company had charged his bank account with an invoice, disclosing the personal details of the other data subject. This was due to an error on the part of Xfera Móviles and was therefore a violation of the principles of integrity and confidentiality.
Legal Citations
Art. 5
Issues & Violations
Non-compliance with general data processing principles