ORANGE ESPAGNE, S.A.U. – €30,000 Fine (Spain, 2022)
General GDPR enforcement action
This case relates to broader data protection obligations, not specifically to cookie or consent banner compliance. It is not included in cookie statistics or the Risk Calculator.
Orange Espagne, S.A.U. was fined EUR 30,000 for registering a phone line in someone's name without their consent. Fraudsters used the person's data to create fake contracts, and Orange failed to verify the legitimacy of these contracts. This case underscores the importance of verifying customer identities to prevent fraud.
What happened
Orange registered a phone line using a person's data without their consent, based on fraudulent contracts.
Who was affected
Individuals whose personal data was used by fraudsters to register phone lines without their consent.
What the authority found
The Spanish DPA found that Orange lacked a valid legal basis for processing the personal data, as the contracts were fraudulent.
Why this matters
This case highlights the need for companies to verify customer identities to prevent fraud. It serves as a reminder that failing to do so can result in significant fines and damage to customer trust.
View original scraped data
Original imported citations before automated processing; the processing history does not establish independent verification.
Source checks
Linked-source text retrieved.
Automated check recorded — 13 March 2026.
Processing notes: national law identified.
Retrieved text may be a secondary summary or an announcement. These automated statuses do not establish that the original decision was read or that the record received an independent legal review. How we check sources
The Spanish DPA (AEPD) imposed a fine ORANGE ESPAGNE, S.A.U. due to insufficient legal basis for data processing. The data subject had filed a complaint against the data controller for registering a telephone line in their name without their consent or any contractual relationship. Rather, the contracts in question were concluded by fraudsters using the personal data of the data subject. Still, the personal data was entered into the company's information systems without any verification as to whether the contracts were lawful and actually concluded by the data subject. The original fine of EUR 60,000 was reduced to EUR 30,000 due to voluntary payment and admission of guilt.
Related Enforcement Actions (1)
Other enforcement actions involving ORANGE ESPAGNE, S.A.U. in ES
Details
Fine Date
15 December 2022
Authority
Agencia Española de Protección de Datos
Fine Amount
€30,000
Enforcement Tracker ID
ETid-1533
About this data
Cite as: Cookie Fines. ORANGE ESPAGNE, S.A.U. - Spain (2022). Retrieved from cookiefines.eu
Last updated: