← Back

EDPB (European Data Protection Board) · EU-wide · 22 Sep 2026 · Enforcement action

Spanish DPA fines Securitas Direct EUR 100,000 for obstructing data subject rights via chargeable telephone number

Original title: The Spanish DPA fines Securitas Direct EUR 100 000 for making the exercise of data subject rights more difficult by directing individuals to a chargeable telephone number

Dates and deadlines
Applies from
1 Feb 2023
Regulatory deadline
17 Sep 2027
From EDPB (European Data Protection Board)

The Spanish DPA (AEPD) imposed a fine of EUR 100 000 on Securitas Direct for infringing Article 12 GDPR and ordered the company, as a corrective measure, to replace within 12 months the notices referring to the 902 telephone number in order to bring them into compliance with the GDPR.

Excerpt from the official page. The original is authoritative.