< Back to situations

Monitor this situation.

[SITUATION] · [QUIET] · [BUSINESS]

2 clusters · 6 sources · 7 days · First seen · Last updated

Digi Spain Telecom GDPR fine

Overview

The Spanish Data Protection Agency (AEPD) upheld a 120,000 euro fine against Digi Spain Telecom for violating GDPR regulations. The penalty resulted from an unauthorized SIM card duplicate issuance that enabled a third party to intercept bank verification messages and conduct unauthorized transfers.

While Digi contested the ruling by claiming its security systems were bypassed via fraudulent documentation, the AEPD rejected these arguments. The regulator stated that SIM swapping is a “foreseeable risk in the telecommunications sector” and found the company negligent for failing to verify active system alerts. This fine brings Digi’s total accumulated penalties from the regulator to approximately 2 million euros. The payment is currently suspended pending a decision by the National Court.

Entities

SFR · Digi Spain Telecom · Altice · DGCCRF · Agencia Española de Protección de Datos

Timeline

  1. 8 days ago

    [BUSINESS] 2 sources
    Syma Mobile fined 1.1 million euros for telemarketing violations

    Syma Mobile has been fined 1.1 million euros by French authorities for illegal telemarketing practices, including contacting consumers on the Bloctel do-not-call list.

  2. 14 days ago

    [TECHNOLOGY] 4 sources
    Digi Spain Telecom faces 120,000 euro fine over SIM swapping

    The AEPD has upheld a 120,000 euro fine against Digi Spain Telecom following a SIM swapping incident that led to unauthorized bank transfers, bringing its total fines to nearly 2 million euros.

Sources

cantabriadirecta.es · economiadigital.es · kulturegeek.fr · laquotidienne.fr · moncloa.com · notretemps.com