Enforcement
EN Xfera Moviles S.A.: Insufficient technical and organisational measures to ensure information security
€55,000 fine - Spanish Data Protection Authority (aepd)
Content
The company had changed a contract for a mobile phone connection to a new owner, whereby the personal data of a data subject such as his address and telephone numbers were freely accessible. This constituted a violation of the principles of confidentiality and integrity.
GDPR Articles: Art. 5 GDPR, Art. 32 GDPR
Industry: Media, Telecoms and Broadcasting