# ASNEF-EQUIFAX, SERVICIOS DE INFORMACIÓN SOBRE SOLVENCIA Y CRÉDITO, S.L.: Insufficient legal basis for data processing

- Type: Enforcement
- Source: Spanish Data Protection Authority (aepd)
- Date: 2025-05-19
- Original: https://www.enforcementtracker.com/ETid-2734
- Canonical: https://overview.legal/posts/48849
- Topics: Controllers, Insurance, Processing Agreement, Personal Data, Processing, Data Controller, Supervisory Authorities, Law Enforcement

## Summary

The Spanish DPA imposed a fine of EUR 200,000 on ASNEF-EQUIFAX, SERVICIOS DE INFORMACIÓN SOBRE SOLVENCIA Y CRÉDITO, S.L. The controller obtained personal data from a third party without verifying its legality. This resulted in the controller processing the data without a sufficient legal basis. The controller also failed to sufficiently fulfil the a request for data erasure.

## Full text

The Spanish DPA imposed a fine of EUR 200,000 on ASNEF-EQUIFAX, SERVICIOS DE INFORMACIÓN SOBRE SOLVENCIA Y CRÉDITO, S.L. The controller obtained personal data from a third party without verifying its legality. This resulted in the controller processing the data without a sufficient legal basis. The controller also failed to sufficiently fulfil the a request for data erasure.

GDPR Articles: Art. 6 (1) GDPR, Art. 17 GDPR
Industry: Finance, Insurance and Consulting

---
Generated by overview.legal · https://overview.legal/posts/48849 · 2026-08-22