Spain: AEPD fines Xfera Móviles €5,000 for lack of collaboration
The Spanish data protection authority ('AEPD') issued, on 2 July 2020, a Resolution ('the Resolution') in proceeding PS/00090/2020 fining Xfera Móviles, S.A. €5,000 for violating Article 58(1) of the General Data Protection Regulation (Regulation (EU) 2016/679) ('GDPR') for not collaborating constructively with the supervisory authority. In particular, the AEPD held that the fact that Xfera Móviles is not a new company and should have established procedures for the fulfillment of obligations under the GDPR, including responding to requirements of the AEPD, counted as an aggravating circumstances.
Furthermore, the AEPD highlighted since Xfera Móviles took the option of a voluntary payment on 11 June 2020, the fine could be reduced down to €3,000.
You can read the Resolution, only available in Spanish, here.