Vodafone Espana

€21K($23K USD)final

Date Issued

2019-10-19

Regulation

Authority

Spanish Data Protection Authority (AEPD)

Country

Spain

Violation Type

Non-compliance with lawful basis for data processing

Currency

EUR

Violation Summary

Vodafone had processed personal data of the claimant (bank details, name, surname and national identification number) years after the contractual relationsid had ended. The fine of EUR 35.000 was reduced to EUR 21.000.Vodafone processed the personal details of a former client, details that included first name, last name and national ID number, several years after their contractual relationship had ended. The initial fine was set at €35,000 but it was reduced to €21,000 due to cooperation on behalf of Vodafone Espana.

Articles Violated

Art. 6 (1) GDPR

Other Fines for Vodafone Espana

DateRegulationAmount (USD)Type
--GDPR$29,160Non-compliance with subjects' rights protection safeguards
--GDPR$5,400Failure to comply with processing principles
2021-03-16GDPR$64,800Failure to comply with data processing principles
2020-01-09GDPR$3,240Non-cooperation with Data Protection Authority
2020-01-09GDPR$3,240Non-cooperation with Data Protection Authority
2020-01-07GDPR$47,520Failure to comply with data processing principles
2020-01-07GDPR$47,520Failure to comply with data processing principles
2019-11-06GDPR$64,800Non-compliance with lawful basis for data processing
2019-11-06GDPR$64,800Non-compliance with lawful basis for data processing
2019-10-25GDPR$38,880Non-compliance with lawful basis for data processing