TELEFÓNICA MÓVILES ESPAÑA, S.A.U. – €900,000 Fine (Spain, 2022)

€900,000Agencia Española de Protección de Datos1 February 2022Spain
final
Fine

General GDPR enforcement action

This case relates to broader data protection obligations, not specifically to cookie or consent banner compliance. It is not included in cookie statistics or the Risk Calculator.

Telefónica Móviles España was fined EUR 900,000 by the Spanish DPA for failing to verify the identity of fraudsters who requested SIM cards. This led to unauthorized contracts and transfers in customers' names. The case highlights the need for strong identity checks to protect customer data.

What happened

Telefónica Móviles España issued SIM cards to fraudsters without verifying their identity.

Who was affected

Telefónica customers whose identities were used by fraudsters to obtain SIM cards and make unauthorized transactions.

What the authority found

The Spanish authority ruled that Telefónica failed to properly verify identities, violating GDPR's data security requirements.

Why this matters

This case emphasizes the importance of robust identity verification processes to prevent fraud. It signals to telecom companies the need to strengthen security measures to protect customer data.

GDPR Articles Cited

AI-verified

Art. 5(1)(f) GDPR
View original scraped data
Art. 5(1)(f) GDPR

Original data from scraper before AI verification against source document.

Source verified 5 March 2026
verified correct
Full Legal Summary
Detailed

The Spanish DPA has fined TELEFÓNICA MÓVILES ESPAÑA, S.A.U. EUR 900,000. Four Telefónica customers had filed complaints with the DPA. In the course of its investigation, the DPA found that fraudsters had pretended to be the data subjects when contacting Telefónica and had demanded a copy of their SIM cards. As a result, they were able to conclude contracts at the expense of the data subjects and carry out various transfers. According to the DPA, Telefónica had not properly verified the identity of the fraudsters before issuing the SIM cards and ensured that the inquirers were really the SIM card holders.

Details

Fine Date

1 February 2022

Authority

Agencia Española de Protección de Datos

Fine Amount

€900,000

Enforcement Tracker ID

ETid-1059

About this data

Data: CMS GDPR Enforcement Tracker
Licensed under CC BY-NC-SA 4.0
AI-verified and classified

Cite as: Cookie Fines. TELEFÓNICA MÓVILES ESPAÑA, S.A.U. - Spain (2022). Retrieved from cookiefines.eu

Report Inaccuracy

Last updated: