Vodafone España, S.A.U.

€60K($65K USD)final

Date Issued

2020-02-03

Regulation

Authority

Spanish Data Protection Authority (AEPD)

Country

Spain

Violation Type

Non-compliance with lawful basis for data processing

Currency

EUR

Violation Summary

A customer complained that the company had processed their personal data without their consent because an email was sent to them on behalf of a company regarding the purchase of a service that was actually not bought by the respective individual. The personal details of the individuals were incorporated into Vodafone España’s systems without the consent of that individual. Initially, the fine was determined to be €100,000 but was reduced to €60,000.

Articles Violated

Art. 5 GDPRArt. 6 GDPR

Other Fines for Vodafone España, S.A.U.

DateRegulationAmount (USD)Type
2020-03-04GDPR$64,800Non-compliance with lawful basis for data processing
2020-02-03GDPR$81,000Non-compliance with lawful basis for data processing
2020-02-03GDPR$54,000Non-compliance with lawful basis for data processing
2020-02-03GDPR$81,000Non-compliance with lawful basis for data processing
2020-02-03GDPR$81,000Non-compliance with lawful basis for data processing
2020-02-03GDPR$64,800Non-compliance with lawful basis for data processing
2020-02-03GDPR$81,000Non-compliance with lawful basis for data processing
2020-02-03GDPR$54,000Non-compliance with lawful basis for data processing