AEPD (Spain) - EXP202306073

Facts }}}} The DPA fined a telephone operator company €400,000 for unlawfully changing a mobile line’s ownership and issuing a duplicate SIM card without proper identity verification, breaching [[Article 6 GDPR]] after a SIM swap fraud.The DPA fined a telecommunications provider €300,000 for unlawfully changing a mobile line’s ownership and issuing a duplicate SIM card to a third party impersonating a customer. According to the DPA, the provider failed to properly verify the customer’s identity. == English Summary ==== English Summary ==