Vodafone España
€120K($130K USD)final
Date Issued
2020-02-27
Regulation
Authority
Spanish Data Protection Authority (AEPD)
Country
Spain
Violation Type
Non-compliance with lawful basis for data processing
Currency
EUR
Violation Summary
The company was not able to prove that an individual had given them consent to access and process their personal data with the goal of opening a telephone contract. The AEPD further explained that the company unlawfully disclosed the affected person’s personal data to third party credit agencies.
Articles Violated
Art. 5 GDPR
Related Headlines
Spain highest fines issued for violations of GDPR 2024 - Statista
Statista · 1/8/2026
Spain: AEPD fines Vodafone €200,000 for processing data unlawfully - DataGuidance
DataGuidance · 4/29/2025
Other Fines for Vodafone España
| Date | Regulation | Amount (USD) | Type |
|---|---|---|---|
| 2020-03-03 | GDPR | $45,360 | Failure to implement sufficient measures to ensure information security |
| 2020-03-03 | GDPR | $45,360 | Failure to implement sufficient measures to ensure information security |
| 2020-03-03 | GDPR | $43,200 | Non-compliance with lawful basis for data processing |
| 2020-03-03 | GDPR | $43,200 | Non-compliance with lawful basis for data processing |
| 2020-03-03 | GDPR | $25,920 | Non-compliance with lawful basis for data processing |
| 2020-03-03 | GDPR | $25,920 | Non-compliance with lawful basis for data processing |
| 2020-02-27 | GDPR | $129,600 | Non-compliance with lawful basis for data processing |
| 2020-02-14 | GDPR | $45,360 | Failure to implement sufficient measures to ensure information security |
| 2020-02-14 | GDPR | $45,360 | Failure to implement sufficient measures to ensure information security |