PRA Iberia S.L. – €60,000 Fine (Spain, 2021)

€60,000Agencia Española de Protección de Datos27 July 2021Spain
final
Fine

General GDPR enforcement action

This case relates to broader data protection obligations, not specifically to cookie or consent banner compliance. It is not included in cookie statistics or the Risk Calculator.

PRA Iberia S.L. was fined EUR 60,000 by the Spanish privacy authority for mishandling a person's data. The company claimed a contract existed with the person, but the person had no knowledge of it and couldn't get information from the company. This matters because it shows companies must respond to information requests and have a valid reason to process personal data.

What happened

PRA Iberia S.L. claimed a contract existed with a person who had no knowledge of it and ignored their request for information.

Who was affected

The person who was wrongly claimed to have a contract with PRA Iberia S.L. and whose data was mishandled.

What the authority found

The Spanish authority found PRA Iberia S.L. lacked a valid legal basis for processing the person's data and failed to provide requested information.

Why this matters

This case highlights the importance of companies having clear legal grounds for data processing and responding to individuals' information requests. It serves as a reminder that ignoring such requests can lead to significant fines.

GDPR Articles Cited

Art. 15 GDPR
Art. 6(1) GDPR
Full Legal Summary
Detailed

The Spanish DPA (AEPD) has fined PRA Iberia S.L. EUR 60,000. A data subject had filed a complaint against the controller with the AEPD. The complaint was based on the fact that the controller asserted a claim arising from a contract that the data subject had never concluded and of which he had no knowledge. The AEPD points out that the data subject had attempted to exercise his right to information, but received no response from the controller, that instead continued to add interest to the data subject's alleged debt.

Related Enforcement Actions (0)

No other enforcement actions found for PRA Iberia S.L. in ES

This is the only recorded action for this entity in this jurisdiction.

Details

Fine Date

27 July 2021

Authority

Agencia Española de Protección de Datos

Fine Amount

€60,000

Enforcement Tracker ID

ETid-788

About this data

Data: CMS GDPR Enforcement Tracker
Licensed under CC BY-NC-SA 4.0
AI-verified and classified

Cite as: Cookie Fines. PRA Iberia S.L. - Spain (2021). Retrieved from cookiefines.eu

Report Inaccuracy

Last updated: