Equifax Iberica S.L. – €1,000,000 Fine (Spain, 2021)
General GDPR enforcement action
This case relates to broader data protection obligations, not specifically to cookie or consent banner compliance. It is not included in cookie statistics or the Risk Calculator.
Spain fined Equifax Iberica EUR 1,000,000 for adding people's personal data to a debt file without their consent. Some of the data was incorrect, and Equifax failed to inform people properly about this data use. This case highlights the importance of transparency and accuracy in handling personal data.
What happened
Equifax Iberica included personal data in a debt file without consent and failed to inform individuals properly.
Who was affected
Individuals whose personal data was added to the Judicial Claims and Public Entities File without their consent.
What the authority found
The Spanish DPA found that Equifax violated data protection principles by processing personal data unlawfully and failing to inform people properly.
Why this matters
This case underscores the need for companies to ensure transparency and accuracy when processing personal data, emphasizing the importance of obtaining consent and informing individuals about data use.
GDPR Articles Cited
View original scraped data
Original data from scraper before AI verification against source document.
The Spanish DPA (AEPD) has imposed a fine of EUR 1,000,000 on Equifax Ibérica, SL. A total of 96 complaints were filed with the DPA against the controller because it had included personal data of individuals associated with alleged debts in the Judicial Claims and Public Entities File ('FIJ') without their consent. In some cases, these data were not even correct. According to the DPA, the processing of the data subjects' personal data involving the FIJ file had been unlawful and violated several data protection principles of data processing (lawfulness and transparency, purpose limitation, data minimization, and accuracy). In addition, the controller had not properly informed the data subjects about the processing of their data, thus violating its duty to inform them.
Related Enforcement Actions (1)
Other enforcement actions involving Equifax Iberica S.L. in ES
Details
Fine Date
23 April 2021
Authority
Agencia Española de Protección de Datos
Fine Amount
€1,000,000
Enforcement Tracker ID
ETid-656
About this data
Cite as: Cookie Fines. Equifax Iberica S.L. - Spain (2021). Retrieved from cookiefines.eu
Last updated: