Spanish DPA fines Securitas Direct EUR 100,000 for directing data subjects to chargeable telephone number
Original title: The Spanish DPA fines Securitas Direct EUR 100 000 for making the exercise of data subject rights more difficult by directing individuals to a chargeable telephone number
The Spanish DPA (AEPD) found Securitas Direct in breach of Article 12(2) GDPR for directing data subjects to exercise their rights through a chargeable 902 telephone number in video surveillance notices. Controllers must provide free channels for data subjects to exercise their rights under Articles 15-22 GDPR; charging for access or making it more difficult to reach a free channel violates this requirement. The AEPD imposed a EUR 100,000 fine and ordered the company to replace non-compliant notices within 12 months.
What changed
- Spanish DPA decision published on EDPB website documenting EUR 100,000 fine against Securitas Direct dated 1 February 2023 for Article 12(2) GDPR infringement
- Chargeable 902 telephone number for exercising data subject rights (access and objection) deemed non-compliant with requirement that such rights be exercisable free of charge
- Corrective measure ordering Securitas Direct to replace video surveillance notices referring to chargeable telephone number and ensure compliance within 12 months
Who is affected
Controllers in the EU (particularly those in surveillance, security, or other sectors using notices), especially those directing data subjects to paid telephone numbers or making access to free channels difficult
Summary generated by a language model; the official text prevails. Not legal advice.