The Spanish Data Protection Authority has recently issued its highest fine to date, totaling €8.15 million, for several breaches of GDPR and national legislation by a multinational telecommunication company and its service providers. Notably, €2 million of the fine was attributable to its service provider conducting an international transfer of personal data to a country that did not comply with the European data protection requirements.