Sanction RGPD Spanish Data Protection Authority (aepd) — DIGI SPAIN TELECOM, S.L.U. : 150 k€ (2025)
- Autorité de contrôle
- Spanish Data Protection Authority (aepd)
- Pays
- Espagne
- Entreprise / secteur
- DIGI SPAIN TELECOM, S.L.U.
- Montant de l'amende
- 150 k€
- Date de la décision
- 17 septembre 2025
- Fondement juridique
- Art. 6 (1)
- Manquement
- Base légale insuffisante pour le traitement
Résumé des faits
The Spanish DPA has imposed a fine of EUR 150,000 on Digi Spain Telecom S.L.U. The controller rejected the application for a contract due to outstanding debt, despite this being untrue as the applicant had been the victim of identity theft. During the verification process and the decision-making process regarding acceptance of the application, data was processed without a sufficient legal basis.