News · GDPRhub EN LLM context A cited markdown file you can paste into your AI assistant (ChatGPT, Claude, a RAG or project knowledge base) to ground it in this document. Contains: this document’s text, its sections with their topics, and the full text of every law provision it applies. Everything links back to its source on overview.legal — legal information, not advice.

AEPD (Spain) - EXP202306073

Telecommunications IP Address Processing Agreement Supervisory Authorities Identification
Jan 7, 2026
Summary

Facts: The Data Protection Authority has fined a telecommunications company €400,000 for unlawfully changing the ownership of a mobile phone subscription and issuing a dual SIM card without proper identity verification, violating [Article 6 of the GDPR], following a case of SIM card fraud. The Data Protection Authority has also fined a telecommunications provider €300,000 for unlawfully changing the ownership of a mobile phone subscription and issuing a dual SIM card to a third party who falsely presented themselves as a customer. According to the Data Protection Authority, the provider did not properly verify the customer's identity.

How it connects

References

Related across sources

Enforcement Telecommunications operator (operator of electronic communications networks and services): Non-compliance with general data processing principles Croatian Data Protection Authority (azop) Enforcement ATRESMEDIA CORPORACIÓN DE MEDIOS DE COMUNICACIÓN, S.A.: Niet-naleving van de algemene principes voor gegevensverwerking. Spanish Data Protection Authority (aepd) Enforcement ATRESMEDIA CORPORACIÓN DE MEDIOS DE COMUNICACIÓN, S.A.: Non-compliance with general data processing principles Spanish Data Protection Authority (aepd) Enforcement EDA TV CONSULTING, S.L.: Overtreding van de algemene principes voor gegevensverwerking. Spanish Data Protection Authority (aepd) Enforcement Telecommunications Operator: Non-compliance with general data processing principles Bulgarian Commission for Personal Data Protection (KZLD) Enforcement APD/GBA (Belgium) - 117/2022 APD/GBA (Belgium)

Full text

Facts: The data protection authority (DPA) has fined a telecommunications company €400,000 for unlawfully changing the owner of a mobile phone subscription and issuing an identical SIM card without proper identity verification, violating [Article 6 of the GDPR], following a fraud case involving the exchange of a SIM card. The DPA has also fined a telecom provider €300,000 for unlawfully changing the owner of a mobile phone subscription and issuing an identical SIM card to a third party who pretended to be a customer. According to the DPA, the provider did not properly verify the customer's identity. Summary in English: Summary in English: --- This content has been automatically translated using machine translation. The original version is available in the source language. --- This content was automatically translated using machine translation. The original version is available in the source language.

Similar Content