AEPD (Spain) - E/05270/2018 – E/08416/2018
| AEPD (Spain) - E/05270/2018 – E/08416/2018 | |
|---|---|
 | |
| Authority: | AEPD (Spain) |
| Jurisdiction: | Spain |
| Relevant Law: | Article 6 GDPR Article 17 GDPR Article 56 GDPR |
| Type: | Complaint |
| Outcome: | Other Outcome |
| Started: | |
| Decided: | |
| Published: | |
| Fine: | None |
| Parties: | |
| National Case Number/Name: | E/05270/2018 – E/08416/2018 |
| European Case Law Identifier: | n/a |
| Appeal: | n/a |
| Original Language(s): | Spanish |
| Original Source: | AEPD (in ES) |
| Initial Contributor: | n/a |
The Spanish DPA forwarded a complaint by a data subject regarding a public Facebook page that was created without their consent and disclosed their personal data (name, surname, address) to the Irish DPA. When they tried to delete it, the company requested that they prove their identity by providing even more personal data.
English Summary
Facts
A data subject complained because Facebook had opened a public page disclosing their name, surname and address without their consent.
Holding
The Spanish DPA forwarded the complaint to the Irish DPA as the main establishment of Facebook in Europe is in Ireland. The Irish DPC forwarded the complaint to Facebook and mediated to find an amicable solution by which Facebook accepted to delete the account opened on behalf of the complainant. The decision was communicated to the Spanish DPA that forwarded it to the complainant.
Comment
The decision from the Spanish DPA does not explain whether (i) there was any investigation by the Irish DPA on why the page had been opened in the first place, and (ii) how Facebook had access to the data of the complainant.
Further Resources
Share blogs or news articles here!
English Machine Translation of the Decision
The decision below is a machine translation of the Spanish original. Please refer to the Spanish original for more details.
