# Oney Servicios Financieros E.F.C.: Non-compliance with general data processing principles

- Type: Enforcement
- Source: Spanish Data Protection Authority (aepd)
- Date: 2023-10-23
- Original: https://www.enforcementtracker.com/ETid-2217
- Canonical: https://overview.legal/posts/48332
- Topics: Personal Data, Controllers, IP Address, Insurance, Processing Agreement, Processing, Data Controller, Supervisory Authorities, Law Enforcement

## Summary

The Spanish DPA has imposed a fine of EUR 50,000 on Oney Servicios Financieros E.F.C... The controller had submitted data from the data subject to a credit information system because of an alleged debt. However, the debt had been cancelled, which was also confirmed by a court ruling. For this reason, the DPA determined that the disclosure of the data subject's personal data was unlawful.

## Full text

The Spanish DPA has imposed a fine of EUR 50,000 on Oney Servicios Financieros E.F.C... The controller had submitted data from the data subject to a credit information system because of an alleged debt. However, the debt had been cancelled, which was also confirmed by a court ruling. For this reason, the DPA determined that the disclosure of the data subject's personal data was unlawful.

GDPR Articles: Art. 5 (1) d) GDPR
Industry: Finance, Insurance and Consulting

---
Generated by overview.legal · https://overview.legal/posts/48332 · 2026-08-22