Enforcement · Spanish Data Protection Authority (aepd) EN LLM context A cited markdown file you can paste into your AI assistant (ChatGPT, Claude, a RAG or project knowledge base) to ground it in this document. Contains: this document’s text, its sections with their topics, and the full text of every law provision it applies. Everything links back to its source on overview.legal — legal information, not advice.

NBQ Technology, S.A.U.: Insufficient legal basis for data processing

€24,000 Fine
NBQ Technology, S.A.U.
SPAIN
Art. 6 GDPR
Controllers Insurance Processing Agreement Personal Data Processing Access Controls Data Controller Supervisory Authorities
Dec 7, 2021 Source

How it connects

Related across sources

Guidance EDPB Annual Report 2021 EDPB Guidance Guidelines 4/2019 on Article 25 Data Protection by Design and by Default Version 2.0 Adopted on 20 October 2020 EDPB Case Law SG Nürnberg - S 5 SF 65/24 DS Social Court Nuremberg Literature HOW GDPR TREATS AUTOMATED DECISION-MAKING Journal Scientific and Applied Research Literature The data subject’s right to access to information under GDPR and the right of the data controller to protect its know-how Przegląd Prawniczy Uniwersytetu im. Adam Mickiewicza Case Law Deutsche Wohnen SE v Staatsanwaltschaft Berlin CJEU

Full text

The Spanish DPA (AEPD) has fined NBQ Technology, S.A.U.. A data subject filed a complaint with the DPA against the company after they had denied him a financial transaction due to alleged outstanding payments on a loan. As it turned out, an identity thief had obtained the data subject's data without authorization and applied for a loan from the data controller under pretense of the data subject's identity. The controller then approved the loan. Since the data processed in the course of granting the loan did not belong to the borrower but to the data subject, the AEPD found that the controller had no legal basis for processing the data. The processing was therefore unlawful and a breach of Art. 6 (1) GDPR was affirmed. The original fine of EUR 40,000 was reduced to EUR 24,000 due to the immediate payment and the admission of guilt.

Industry: Finance, Insurance and Consulting

Original document at the source www.aepd.es

Similar Content