Legitimacy: AEPD Spain Fines Telecom EUR 75,000 for Willful GDPR Breach

The telecom failed to resolve an individual’s complaint after it charged him another individual’s invoice 5 times (the individual was not a client of the telecom), the complainant’s personal data was processed (including financial information), and there was a proactive responsibility to have a legal basis for processing (there was no consent or contract being performed).

#cyber #privacy #emergingrisk