Enforcing jurisdiction
Spain · Geography does not establish applicable law.
Confirmed applicable legislation

DIGI SPAIN TELECOM, S.L.U. – €150,000 Fine (Spain, 2025)

€150,000Agencia Española de Protección de Datos17 September 2025Spain
final
Fine

Privacy enforcement record

This record is classified outside cookie consent. Subject classification does not confirm an applicable law. It is not included in cookie statistics or the Risk Calculator.

Digi Spain Telecom was fined for processing a customer's data without a proper legal basis after wrongfully rejecting their application due to identity theft. This case shows the importance of verifying information before making decisions that affect customers. Companies must ensure they have the right legal grounds for processing personal data.

What happened

Digi Spain Telecom processed personal data without a sufficient legal basis when rejecting a contract application.

Who was affected

A customer who was a victim of identity theft and had their application wrongfully denied.

What the authority found

The Spanish Data Protection Authority imposed a fine for failing to have a valid legal basis for processing the customer's data.

Why this matters

This case serves as a reminder for companies to verify information thoroughly before making decisions based on personal data. It highlights the need for proper data handling practices to avoid legal issues.

Recorded legal citations
Automatically processed
Art. 6(1) GDPR
View original scraped data
Art. 6(1) GDPR

Original imported citations before automated processing; the processing history does not establish independent verification.

Source checks

Linked-source text retrieved.

Automated check recorded — 6 March 2026.

Processing notes: national law identified.

Retrieved text may be a secondary summary or an announcement. These automated statuses do not establish that the original decision was read or that the record received an independent legal review. How we check sources

Full Legal Summary
Detailed

The Spanish DPA has imposed a fine of EUR 150,000 on Digi Spain Telecom S.L.U. The controller rejected the application for a contract due to outstanding debt, despite this being untrue as the applicant had been the victim of identity theft. During the verification process and the decision-making process regarding acceptance of the application, data was processed without a sufficient legal basis.

Related Enforcement Actions (0)

No other enforcement actions found for DIGI SPAIN TELECOM, S.L.U. in ES

This is the only recorded action for this entity in this jurisdiction.

Details

Fine Date

17 September 2025

Authority

Agencia Española de Protección de Datos

Fine Amount

€150,000

Enforcement Tracker ID

ETid-2918

About this data

Data: CMS GDPR Enforcement Tracker
Licensed under CC BY-NC-SA 4.0
Automatically normalized and classified

Cite as: Cookie Fines. DIGI SPAIN TELECOM, S.L.U. - Spain (2025). Retrieved from cookiefines.eu

Report Inaccuracy

Last updated: