Telefónica Móviles España, S.A.U. – €70,000 Fine (Spain, 2023)

€70,000Agencia Española de Protección de Datos24 April 2023Spain
final
Fine

General GDPR enforcement action

This case relates to broader data protection obligations, not specifically to cookie or consent banner compliance. It is not included in cookie statistics or the Risk Calculator.

Spain fined Telefónica Móviles €70,000 for giving a customer's SIM card to a fraudster without checking their identity. This mistake led to unauthorized access to the customer's bank account. Businesses must verify identities before sharing sensitive information.

What happened

Telefónica Móviles España gave a duplicate SIM card to a fraudster without verifying their identity.

Who was affected

A customer whose SIM card was duplicated and used by an unauthorized third party.

What the authority found

The Spanish authority ruled that Telefónica Móviles España failed to verify the identity of the third party, violating GDPR's requirement for a valid legal basis.

Why this matters

This case underscores the importance of identity verification in preventing fraud. Companies should strengthen their processes to protect customer data and avoid hefty fines.

GDPR Articles Cited

Art. 6(1) GDPR
Full Legal Summary
Detailed

The Spanish DPA has imposed a fine of EUR 70,000 on Telefónica Móviles España, S.A.U.. A person had filed a complaint with the DPA because the company had given a duplicate of their SIM card to an unauthorized fraudulent third party without their consent. During its investigation, the DPA found that the company failed to verify the identity of the third party or obtain the data subject's consent to share their data. This allowed the fraudsters to gain access to the data subject's bank account and make unauthorized transactions.

Details

Fine Date

24 April 2023

Authority

Agencia Española de Protección de Datos

Fine Amount

€70,000

Enforcement Tracker ID

ETid-1791

About this data

Data: CMS GDPR Enforcement Tracker
Licensed under CC BY-NC-SA 4.0
AI-verified and classified

Cite as: Cookie Fines. Telefónica Móviles España, S.A.U. - Spain (2023). Retrieved from cookiefines.eu

Report Inaccuracy

Last updated: