Xfera Moviles S.A.

€60K($65K USD)final

Date Issued

2020-02-03

Regulation

Authority

Spanish Data Protection Authority (AEPD)

Country

Spain

Violation Type

Non-compliance with lawful basis for data processing

Currency

EUR

Violation Summary

The Spanish Data Protection Authority revealed that Xfera Moviles S.A. has unlawfully processed data that included bank details, customer address as well as name of various individuals.

Articles Violated

Art. 5 GDPRArt. 6 GDPR

Other Fines for Xfera Moviles S.A.

DateRegulationAmount (USD)Type
2022-02-01GDPR$216,000Non-compliance with lawful basis for data processing
2020-12-09GDPR$43,200Failure to comply with data processing principles
2020-11-06GDPR$21,600Failure to implement sufficient measures to ensure information security
2020-09-25GDPR$64,800Failure to comply with data processing principles
2020-07-23GDPR$5,400Non-cooperation with Data Protection Authority
2020-07-20GDPR$75,600Failure to comply with data processing principles
2020-07-10GDPR$59,400Non-compliance with subjects' rights protection safeguards
2020-07-02GDPR$5,400Non-cooperation with Data Protection Authority
2020-06-15GDPR$81,000Non-compliance with subjects' rights protection safeguards
2020-06-09GDPR$42,120Non-compliance with lawful basis for data processing