DIGI SPAIN TELECOM, S.L.U. – €150,000 Fine (Spain, 2025)

€150,000Agencia Española de Protección de Datos17 September 2025Spain
final
Fine

General GDPR enforcement action

This case relates to broader data protection obligations, not specifically to cookie or consent banner compliance. It is not included in cookie statistics or the Risk Calculator.

Digi Spain Telecom was fined €150,000 for wrongly rejecting a customer's contract application based on false debt claims. The company processed personal data without a valid legal reason, as the applicant was actually a victim of identity theft. This case emphasizes the need for companies to verify information accurately before making decisions that affect users.

What happened

Digi Spain Telecom rejected a contract application based on incorrect debt information, which was due to identity theft.

Who was affected

The customer whose contract application was wrongly denied due to false claims of outstanding debt.

What the authority found

The Spanish data protection authority found that Digi Spain Telecom processed personal data without a sufficient legal basis.

Why this matters

This fine highlights the importance of accurate data verification in decision-making processes. Companies must ensure they have a valid reason to process personal data to avoid penalties.

GDPR Articles Cited

AI-verified

Art. 6(1) GDPR
View original scraped data
Art. 6(1) GDPR

Original data from scraper before AI verification against source document.

Source verified 6 March 2026
national law identified
Full Legal Summary
Detailed

The Spanish DPA has imposed a fine of EUR 150,000 on Digi Spain Telecom S.L.U. The controller rejected the application for a contract due to outstanding debt, despite this being untrue as the applicant had been the victim of identity theft. During the verification process and the decision-making process regarding acceptance of the application, data was processed without a sufficient legal basis.

Related Enforcement Actions (0)

No other enforcement actions found for DIGI SPAIN TELECOM, S.L.U. in ES

This is the only recorded action for this entity in this jurisdiction.

Details

Fine Date

17 September 2025

Authority

Agencia Española de Protección de Datos

Fine Amount

€150,000

Enforcement Tracker ID

ETid-2918

About this data

Data: CMS GDPR Enforcement Tracker
Licensed under CC BY-NC-SA 4.0
AI-verified and classified

Cite as: Cookie Fines. DIGI SPAIN TELECOM, S.L.U. - Spain (2025). Retrieved from cookiefines.eu

Report Inaccuracy

Last updated: