( October 24, 2025, 10:59 GMT | Official Statement) -- MLex Summary: Bizum, an instant payment system, has been fined €100,000 for breaching the EU’s General Data Protection Regulation, the Spanish Data Protection Agency said on Thursday. The company lacked sufficient technical and operational measures to ensure the security of processed data, the DPA said. During a data breach, "pseudonymous data" — a method used to conceal identity — including users’ “aliases” and telephone numbers, were temporarily published online. The fine can be reduced by the standard 20% in the event that Bizum makes a voluntary payment, thereby waiving any administrative action or appeal, the watchdog said.Decision attached (in Spanish). ...
Prepare for tomorrow’s regulatory change, today
MLex identifies risk to business wherever it emerges, with specialist reporters across the globe providing exclusive news and deep-dive analysis on the proposals, probes, enforcement actions and rulings that matter to your organization and clients, now and in the longer term.
Know what others in the room don’t, with features including:
- Daily newsletters for Antitrust, M&A, Trade, Data Privacy & Security, Technology, AI and more
- Custom alerts on specific filters including geographies, industries, topics and companies to suit your practice needs
- Predictive analysis from expert journalists across North America, the UK and Europe, Latin America and Asia-Pacific
- Curated case files bringing together news, analysis and source documents in a single timeline
Experience MLex today with a 14-day free trial.