# Xfera Moviles S.A.: Non-compliance with general data processing principles

- Type: Enforcement
- Source: Spanish Data Protection Authority (aepd)
- Date: 2020-07-20
- Original: https://www.enforcementtracker.com/ETid-350
- Canonical: https://overview.legal/posts/46465
- Topics: Integrity and Confidentiality Principle, Professional Secrecy, Personal Data, Security, IP Address, Telecommunications, Processing, Supervisory Authorities

## Summary

A data subject had received a call from another Xfera Móviles customer who stated that the company had charged his bank account with an invoice, disclosing the personal details of the other data subject. This was due to an error on the part of Xfera Móviles and was therefore a violation of the principles of integrity and confidentiality.

## Full text

A data subject had received a call from another Xfera Móviles customer who stated that the company had charged his bank account with an invoice, disclosing the personal details of the other data subject. This was due to an error on the part of Xfera Móviles and was therefore a violation of the principles of integrity and confidentiality.

GDPR Articles: Art. 5 GDPR
Industry: Media, Telecoms and Broadcasting

---
Generated by overview.legal · https://overview.legal/posts/46465 · 2026-08-22