On 1 September 2020, the Spanish DPA (AEPD) issued a EUR 75,000 fine to a telecom operator. The AEPD found the controller to be processing personal data in lack of a lawful basis under Article 6 (1) of the GDPR. The claimant in the case had received 534 unsolicited calls and text messages.
The telecom operator has made a voluntary payment, the fine being reduced to EUR 45,000.
The AEPD decision is available here (only in Spanish).
