← Back

EDPB (European Data Protection Board) · EU-wide · 22 Sep 2026 · Enforcement action

Spanish DPA fine: Securitas Direct €100,000 for obstructing data subject rights via paid telephone number

Original title: The Spanish DPA fined Securitas Direct 100 000 EUR for making the exercise of data subject rights more difficult by directing individuals to a chargeable telephone number

Dates and deadlines
Regulatory deadline
17 Sep 2027
From EDPB (European Data Protection Board)

The Spanish DPA (AEPD) imposed a fine of 100 000 EUR on Securitas Direct for infringing Article 12 GDPR and ordered the company, as a corrective measure, to replace within 12 months the notices referring to the 902 telephone number in order to bring them into compliance with the GDPR.

Excerpt from the official page. The original is authoritative.