Xfera Moviles S.A.
€55,000
Insufficient technical and organisational measures to ensure information security
Дата принятия решения
10 июля 2020 г.
Авторитет
Spanish Data Protection Authority (aepd)
ES
Сектор
Media, Telecoms and Broadcasting
Страна
ES
Закон
GDPRСтатус
FINALОписание
The company had changed a contract for a mobile phone connection to a new owner, whereby the personal data of a data subject such as his address and telephone numbers were freely accessible. This constituted a violation of the principles of confidentiality and integrity.
Юридические цитаты
Art. 5Art. 32
Проблемы и нарушения
Insufficient technical and organisational measures to ensure information security