On 17th October the Spanish Data Protection Agency (AEPD) approved the «Code of Conduct for the Resolution of Data Protection Disputes in the Electronic Communications Sector». The Code will enter into force on 17 December and designates AUTOCONTROL as the independent third party responsible for overseeing its implementation. AUTOCONTROL will handle complaints from individuals against participating companies, manage compliance requests and update the list of participating companies.
The new code updates the 2018 «Protocol for the private resolution of complaints related to data protection in the area of contracts and advertising of telecommunications services», developed by AUTOCONTROL in collaboration with the AEPD and major telecommunications companies in Spain, including Telefónica, Más Móvil, Orange and Vodafone. It aligns the protocol with the requirements of the GDPR.
The code allows AUTOCONTROL to handle complaints filed with the AEPD against participating companies, such as identity theft or credit file listings, with a resolution time of up to 27 days. It also provides for a direct complaint process through AUTOCONTROL with a maximum response time of 30 days. Mediation agreements are binding on participating companies, and the process is free to individuals.
In addition, the AEPD has accredited AUTOCONTROL’s Advertising Jury as the monitoring body for the Code, like its role in the «Code of Conduct Data Processing in Advertising Activities». Ultimately, the new Code aims to strengthen compliance, improve trust and enhance the image of the sector.