- Enforcing jurisdiction
- Spain · Geography does not establish applicable law.
- Confirmed applicable legislation
- Privacy topics
Xfera Moviles S.A. – €60,000 Fine (Spain, 2019)
Privacy enforcement record
This record is classified outside cookie consent. Subject classification does not confirm an applicable law. It is not included in cookie statistics or the Risk Calculator.
Xfera Móviles was fined €60,000 after a person received an SMS that mistakenly allowed access to someone else's account. This incident shows how important it is for companies to ensure that personal data is handled correctly. Businesses must be careful to prevent unauthorized access to user accounts.
What happened
An individual received an SMS meant for a third party that allowed access to that person's account on Xfera Móviles' website.
Who was affected
A person who received the SMS and the third party whose account was accessed.
What the authority found
The data protection authority determined that Xfera Móviles failed to protect personal data, resulting in the fine.
Why this matters
This ruling highlights the need for companies to implement strict protocols to prevent unauthorized access to personal data. It serves as a reminder that mishandling data can lead to serious consequences.
View original scraped data
Original imported citations before automated processing; the processing history does not establish independent verification.
Source checks
Secondary-source text retrieved.
Automated check recorded — 12 March 2026.
No issues were reported by that automated check.
Retrieved text may be a secondary summary or an announcement. These automated statuses do not establish that the original decision was read or that the record received an independent legal review. How we check sources
An individual complainant had received an SMS from Xfera Móviles which was to be addressed to a third party and which allowed him to access the account and personal data of this third party on the Xfera Móviles website via the telephone number and password received by SMS.
Related Enforcement Actions (3)
Other enforcement actions involving Xfera Moviles S.A. in ES
Fine
€60K
Details
Fine Date
19 November 2019
Authority
Agencia Española de Protección de Datos
Fine Amount
€60,000
Enforcement Tracker ID
ETid-119
About this data
Cite as: Cookie Fines. Xfera Moviles S.A. - Spain (2019). Retrieved from cookiefines.eu
Last updated: