Spanish Data Protection Authority (AEPD) · 23 January 2024
ORANGE ESPAGNE S.A.U.
Insufficient legal basis for data processing
Fine€200,000Fine issued
- Regulator
- Spanish Data Protection Authority (AEPD)
- Decided
- 23 January 2024
- Country
- Spain
- Sector
- Media, Telecoms and Broadcasting
- Regulator’s reference
- Not recorded
- Fino case number
- 2024/ES/110
What happened
The DPA imposed a € 200,000 fine on a controller that granted a third party a duplicate SIM card without the data subject’s consent and without verifying the third party’s identity.
Summary from the GDPRhub page for this decision, written by its volunteers, not by Fino. CC BY-NC-SA 4.0.
Rules involved
- Unlawful processing
Sources
The facts on this page come from the sources above, as they recorded them. Nothing has been estimated or filled in. Not legal advice.
Spotted a mistake? Write to angelillolorenzo@gmail.com and quote 2024/ES/110.