CAJA DE SEGUROS REUNIDOS, COMPAÑÍA DE SEGUROS Y REASEGUROS, S.A. – €24,000 Fine (Spain, 2022)
General GDPR enforcement action
This case relates to broader data protection obligations, not specifically to cookie or consent banner compliance. It is not included in cookie statistics or the Risk Calculator.
CAJA DE SEGUROS REUNIDOS was fined for changing an insurance policy's payment details without the policyholder's consent. This case is important because it shows that companies must have permission before altering personal data. The fine was reduced from EUR 40,000 to EUR 24,000 due to voluntary payment and admission of responsibility.
What happened
CAJA DE SEGUROS REUNIDOS changed payment details on an insurance policy without the policyholder's consent.
Who was affected
A policyholder whose payment details were altered without their consent after separating from their ex-partner.
What the authority found
The Spanish DPA found that the company unlawfully changed personal data, violating GDPR's requirement for a valid legal basis.
Why this matters
This ruling highlights the importance of obtaining explicit consent before making changes to personal data. It serves as a reminder for companies to review their data handling practices to ensure compliance with GDPR.
GDPR Articles Cited
The Spanish DPA has imposed a fine on CAJA DE SEGUROS REUNIDOS, COMPAÑÍA DE SEGUROS Y REASEGUROS, S.A.. A data subject filed a complaint with the DPA. The data subject had taken out an insurance policy with the controller, the beneficiary of which was his ex-life partner at the time. After the separation, the ex-life partner asked the controller to change the debit entry for the premium from the data subject's account to her account. The controller carried out this change without the consent of the data subject. The DPA considered this to be an unlawful change to the personal data of the data subject. The original fine of EUR 40,000 was reduced to EUR 24,000 due to voluntary payment and admission of responsibility.
Related Enforcement Actions (0)
No other enforcement actions found for CAJA DE SEGUROS REUNIDOS, COMPAÑÍA DE SEGUROS Y REASEGUROS, S.A. in ES
This is the only recorded action for this entity in this jurisdiction.
Details
Fine Date
9 October 2022
Authority
Agencia Española de Protección de Datos
Fine Amount
€24,000
Enforcement Tracker ID
ETid-1426
About this data
Cite as: Cookie Fines. CAJA DE SEGUROS REUNIDOS, COMPAÑÍA DE SEGUROS Y REASEGUROS, S.A. - Spain (2022). Retrieved from cookiefines.eu
Last updated: