[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$ftOSpz2SY5XlPqGAVrOgYobHHV71-TYXKeNRV4JZ5dYQ":3},{"tableOfContents":4,"markDownContent":5,"htmlContent":6,"metaTitle":7,"metaDescription":7,"wordCount":8,"readTime":9,"title":10,"nbDownloads":11,"excerpt":7,"lang":12,"url":13,"intro":14,"featured":4,"state":15,"author":16,"authorId":17,"datePublication":21,"dateCreation":22,"dateUpdate":23,"mainCategory":24,"categories":39,"metaDatas":45,"imageUrl":46,"imageThumbUrls":47,"id":55},false,"[The Spanish Data Protection Agency](https://www.aepd.es/es/documento/ps-00344-2022.pdf) (AEPD) has fined Orange Spain €30,000 for illegally registering a telephone line in the name of a customer **without verifying the customer's identity**.\r\n\r\n## The facts\r\n\r\nAn individual files a complaint against the company for having registered a telephone line in his name **without his consent**.\r\n\r\nHe claims to have been a \u003Cu>victim of identity theft\u003C/u>. He received a call from the Granada police informing him that a fraudulent crime had been committed with the phone number in question.\r\n\r\nHe accused the company of having introduced the personal data into its information systems without verifying the identity of the person who contracted.\r\n\r\n## Verify the identity of the data subject to ensure consent\r\n\r\nAs a reminder, Article 6.1 of the General Data Protection Regulation (GDPR) states that there are six possible legal bases for data processing, one of which is the \u003Cu>consent of the person\u003C/u> (Art. 6.1.a).\r\n\r\nThe AEPD considered that the company violated the lawfulness of the processing of personal data, since it formalized a cell phone contract, using the complainant as the holder of the contract, **without duly verifying the complainant's data, which resulted in the impersonation of the complainant**.\r\n\r\nThis being the case, Orange Spain violated Article 6.1 of the GDPR, which ensures that personal data is processed lawfully, \u003Cu>since it didn't have the consent of the data subject\u003C/u>.\r\n\r\nThe company should have verified the identity of the customer to ensure consent.","\u003Cp>\u003Ca href=\"https://www.aepd.es/es/documento/ps-00344-2022.pdf\" rel=\"nofollow\">The Spanish Data Protection Agency\u003C/a> (AEPD) has fined Orange Spain €30,000 for illegally registering a telephone line in the name of a customer \u003Cstrong>without verifying the customer's identity\u003C/strong>.\u003C/p>\r\n\u003Ch2 id=\"the-facts\">The facts\u003C/h2>\r\n\u003Cp>An individual files a complaint against the company for having registered a telephone line in his name \u003Cstrong>without his consent\u003C/strong>.\u003C/p>\r\n\u003Cp>He claims to have been a \u003Cu>victim of identity theft\u003C/u>. He received a call from the Granada police informing him that a fraudulent crime had been committed with the phone number in question.\u003C/p>\r\n\u003Cp>He accused the company of having introduced the personal data into its information systems without verifying the identity of the person who contracted.\u003C/p>\r\n\u003Ch2 id=\"verify-the-identity-of-the-data-subject-to-ensure-consent\">Verify the identity of the data subject to ensure consent\u003C/h2>\r\n\u003Cp>As a reminder, Article 6.1 of the General Data Protection Regulation (GDPR) states that there are six possible legal bases for data processing, one of which is the \u003Cu>consent of the person\u003C/u> (Art. 6.1.a).\u003C/p>\r\n\u003Cp>The AEPD considered that the company violated the lawfulness of the processing of personal data, since it formalized a cell phone contract, using the complainant as the holder of the contract, \u003Cstrong>without duly verifying the complainant's data, which resulted in the impersonation of the complainant\u003C/strong>.\u003C/p>\r\n\u003Cp>This being the case, Orange Spain violated Article 6.1 of the GDPR, which ensures that personal data is processed lawfully, \u003Cu>since it didn't have the consent of the data subject\u003C/u>.\u003C/p>\r\n\u003Cp>The company should have verified the identity of the customer to ensure consent.\u003C/p>\r\n",null,260,2,"Sanction of the operator Orange España: lack of verification the identity of the person concerned",0,"en","sanction-of-the-operator-orange-espana-failure-to-verify-the-identity-of-the-person-concerned","The Spanish Data Protection Agency (AEPD) has fined Orange Spain €30,000 for illegally registering a telephone line in the name of a customer without verifying the customer's identity.","Published",{"id":17,"displayName":18,"avatarUrl":19,"bio":7,"blogUrl":7,"color":7,"userId":17,"creationDate":20},2986,"Maëva Vidal","https://static.dastra.eu/tenant-3/avatar/2986/maeva-min-min-min-150.png","2022-09-05T13:22:36","2022-12-27T08:30:00","2022-12-22T16:44:40.9279991","2022-12-22T16:56:28.4575712",{"id":9,"name":25,"description":26,"url":27,"color":28,"parentId":7,"count":7,"imageUrl":7,"parent":7,"order":11,"translations":29},"Blog","A list of curated articles provided by the community","blog","#28449a",[30,33,36],{"lang":31,"name":25,"description":32},"fr","Une liste d'articles rédigés par la communauté",{"lang":34,"name":25,"description":35},"es","Una lista de artículos escritos por la comunidad",{"lang":37,"name":25,"description":38},"de","Eine Liste von Artikeln, die von der Community verfasst wurden",[40],{"id":9,"name":25,"description":26,"url":27,"color":28,"parentId":7,"count":7,"imageUrl":7,"parent":7,"order":11,"translations":41},[42,43,44],{"lang":31,"name":25,"description":32},{"lang":34,"name":25,"description":35},{"lang":37,"name":25,"description":38},[],"https://static.dastra.eu/content/02e1224a-1e27-4225-8128-bec342efc4c2/fingerprint-29047741280-1000.jpg",[48,49,50,51,52,53,54],"https://static.dastra.eu/content/02e1224a-1e27-4225-8128-bec342efc4c2/fingerprint-29047741280-1000.webp","https://static.dastra.eu/content/02e1224a-1e27-4225-8128-bec342efc4c2/fingerprint-29047741280.webp","https://static.dastra.eu/content/02e1224a-1e27-4225-8128-bec342efc4c2/fingerprint-29047741280-1500.webp","https://static.dastra.eu/content/02e1224a-1e27-4225-8128-bec342efc4c2/fingerprint-29047741280-800.webp","https://static.dastra.eu/content/02e1224a-1e27-4225-8128-bec342efc4c2/fingerprint-29047741280-600.webp","https://static.dastra.eu/content/02e1224a-1e27-4225-8128-bec342efc4c2/fingerprint-29047741280-300.webp","https://static.dastra.eu/content/02e1224a-1e27-4225-8128-bec342efc4c2/fingerprint-29047741280-100.webp",53366]