Colombia: SIC fines Movistar COL 263 million for marketing without data subject consent
The Colombian data protection authority ('SIC') announced, on 9 September 2020, that it had fined Colombia Telecomunicaciones SA ESP - Movistar Colombia, COL 263,349,372 (approx. €60,086) for violations of Law 1266 of 2018. In particular, SIC highlighted that it received a complaint from a consumer claiming that Movistar would access the credit history of the consumer, for commercial and sales purposes, without the consent of the same to do so. Moreover, Movistar accessed the consumer's credit history no less than five times in order to offer the consumer plans or improvements to their contracted plan. Additionally, the consumer claimed that a financial entity denied them a loan, based on the number of inquiries made by Movistar on their credit history. Moreover, the SIC noted that this was the fourth fine for the violation of the same rules and called upon Movistar to adopt pertinent, useful, effective, and verifiable measures in order to avoid the repetition of events, such as those that gave rise to the sanction.