Spanish DPA imposes a 900,000€ fine for mobile phone sim card swap
Spanish data protection authority AEPD imposed a 900,000€ fine on Telefónica Móviles España for a loss of confidentiality related to mobile phone sim card duplicates issued to third parties.
AEPD found an assumption of using fraudulent practices based on the generation of duplicates of SIM cards without the consent of their legitimate holders in order to access confidential information for criminal purposes (known as “SIM Swapping”). This was possible due to insufficient measures implemented by Telefónica Móviles España .
