Enforcement
EN ASNEF-EQUIFAX, SERVICIOS DE INFORMACIÓN SOBRE SOLVENCIA Y CRÉDITO, S.L.: Insufficient legal basis for data processing
€200,000 fine - Spanish Data Protection Authority (aepd)
Content
The Spanish DPA imposed a fine of EUR 200,000 on ASNEF-EQUIFAX, SERVICIOS DE INFORMACIÓN SOBRE SOLVENCIA Y CRÉDITO, S.L. The controller obtained personal data from a third party without verifying its legality. This resulted in the controller processing the data without a sufficient legal basis. The controller also failed to sufficiently fulfil the a request for data erasure.
GDPR Articles: Art. 6 (1) GDPR, Art. 17 GDPR
Industry: Finance, Insurance and Consulting