Fino

Spanish Data Protection Authority (AEPD) · 27 July 2021

PRA Iberia S.L.

Insufficient legal basis for data processing

Fine€60,000Fine issued
Regulator
Spanish Data Protection Authority (AEPD)
Decided
27 July 2021
Country
Spain
Sector
Finance, Insurance and Consulting
Regulator’s reference
Not recorded
Fino case number
2021/ES/095
Export as PDF

What happened

The Spanish DPA fined a controller €60,000 for failing to respond to an access request, and for processing personal data without a legal basis, since it could not prove it had entered into a contract with the data subject.

Summary from the GDPRhub page for this decision, written by its volunteers, not by Fino. CC BY-NC-SA 4.0.

Rules involved

  • Data subject rights
  • Unlawful processing

Sources

The facts on this page come from the sources above, as they recorded them. Nothing has been estimated or filled in. Not legal advice.

Spotted a mistake? Write to angelillolorenzo@gmail.com and quote 2021/ES/095.