- Enforcing jurisdiction
- Spain · Geography does not establish applicable law.
- Confirmed applicable legislation
- Privacy topics
Telefónica de España, S.A.U – €45,000 Fine (Spain, 2021)
Privacy enforcement record
This record is classified outside cookie consent. Subject classification does not confirm an applicable law. It is not included in cookie statistics or the Risk Calculator.
Telefónica de España was fined €45,000 for signing a customer up for a service they did not request. The Spanish data protection authority found that the company processed personal data unlawfully. This case highlights the need for companies to ensure they have consent before using customer information.
What happened
Telefónica de España booked a service for a customer without their consent.
Who was affected
The affected person was the customer who was signed up for the service without their agreement.
What the authority found
The authority ruled that Telefónica did not process the customer's data lawfully, violating GDPR rules.
Why this matters
This ruling underscores the importance of obtaining explicit consent from customers before processing their data. Companies should review their practices to avoid similar issues.
View original scraped data
Original imported citations before automated processing; the processing history does not establish independent verification.
Source checks
Linked-source text retrieved.
Review needed — 12 March 2026.
Processing notes: amount discrepancy.
Retrieved text may be a secondary summary or an announcement. These automated statuses do not establish that the original decision was read or that the record received an independent legal review. How we check sources
The Spanish DPA (AEPD) has imposed a fine of EUR 75,000 on Telefonica de España, S.A.U.. A data subject had filed a complaint with the AEPD against the telecommunications company. The controller had booked a service for the data subject without the data subject having concluded a contract for it. After the data subject had accordingly not made any payments for this service, the service was canceled in the same year and a collection agency was commissioned to collect allegedly outstanding debts. The AEPD determined that neither the data processing for the service booking nor the transfer of the data subject's personal data to the collection agency had taken place lawfully. The original fine of EUR 75,000 was reduced to EUR 45,000 due to immediate payment and admission of responsibility.
Related Enforcement Actions (0)
No other enforcement actions found for Telefónica de España, S.A.U in ES
This is the only recorded action for this entity in this jurisdiction.
Details
Fine Date
21 May 2021
Authority
Agencia Española de Protección de Datos
Fine Amount
€45,000
About this data
Cite as: Cookie Fines. Telefónica de España, S.A.U - Spain (2021). Retrieved from cookiefines.eu
Last updated: