Xfera Moviles S.A.
- Country
- Spain
- Fine
- 60,000 EUR
- Date
- 2019-11-19
- Sector
- Business Sector
- Articles
- Art. 32 GDPR
Insufficient technical and organisational measures to ensure information security
An individual complainant had recently received an SMS from Xfera Móviles to be addressed to a third party, which enabled him to access the account and personal data of this third party via the telephone number and password obtained by SMS on the Xfera Móviles website. Authority: Spanish Data Protection Authority (aepd)
Source: https://www.aepd.es/resoluciones/PS-00237-2019_ORI.pdf
Reported by: Andersen Tax & Legal