Enforcing jurisdiction
Spain · Geography does not establish applicable law.
Confirmed applicable legislation

CAIXABANK PAYMENTS & CONSUMER EFC, EP, S.A.U. – Fine (Spain, 2023)

Fine
Agencia Española de Protección de Datos21 March 2023Spain
overturned
Fine

Privacy enforcement record

This record is classified outside cookie consent. Subject classification does not confirm an applicable law. It is not included in cookie statistics or the Risk Calculator.

CAIXABANK PAYMENTS & CONSUMER EFC, EP, S.A.U. was fined EUR 70,000 by the Spanish DPA for unlawfully contacting a person about a debt that had already been annulled. This case shows the importance of ensuring that personal data is used correctly and legally, especially in financial matters.

What happened

The company contacted a person regarding a debt that had been annulled by a court ruling.

Who was affected

The individual who received the debt collection message despite the annulment of their debt.

What the authority found

The DPA found that the company unlawfully disclosed the person's personal data for contacting them about the debt.

Why this matters

This case highlights the need for companies to verify the status of debts before contacting individuals. It serves as a warning to businesses about the legal consequences of mishandling personal data.

Recorded legal citations
Automatically processed
Art. 6(1) GDPR
View original scraped data
Art. 6(1) GDPR

Original imported citations before automated processing; the processing history does not establish independent verification.

Source checks

Linked-source text retrieved.

Automated check recorded — 12 March 2026.

Processing notes: national law identified.

Retrieved text may be a secondary summary or an announcement. These automated statuses do not establish that the original decision was read or that the record received an independent legal review. How we check sources

Full Legal Summary
Detailed

The Spanish DPA has imposed a fine of EUR 70,000 on CAIXABANK PAYMENTS & CONSUMER EFC, EP, S.A.U.. The data subject had received a message from a debt collection company on behalf of Caixabank requesting payment of outstanding debts. However, the debt had been annulled, which was also confirmed in a court ruling. For this reason, the DPA determined that the disclosure of the data subject's personal data for the purpose of contacting them regarding the settlement of the debt was unlawful.

Details

Fine Date

21 March 2023

Authority

Agencia Española de Protección de Datos

Enforcement Tracker ID

ETid-1702

About this data

Data: CMS GDPR Enforcement Tracker
Licensed under CC BY-NC-SA 4.0
Automatically normalized and classified

Cite as: Cookie Fines. CAIXABANK PAYMENTS & CONSUMER EFC, EP, S.A.U. - Spain (2023). Retrieved from cookiefines.eu

Report Inaccuracy

Last updated: