Vodafone España
€40K($43K USD)final
Date Issued
2020-03-03
Regulation
Authority
Spanish Data Protection Authority (AEPD)
Country
Spain
Violation Type
Non-compliance with lawful basis for data processing
Currency
EUR
Violation Summary
The company sent a text message to a person’s phone number informing them that their contract was modified. The affected person, however, was not actually a Vodafone client. The AEPD determined that Vodafone had processed the affected person’s personal details without consent.
Articles Violated
Art. 5 GDPR
Other Fines for Vodafone España
| Date | Regulation | Amount (USD) | Type |
|---|---|---|---|
| 2020-03-03 | GDPR | $45,360 | Failure to implement sufficient measures to ensure information security |
| 2020-03-03 | GDPR | $45,360 | Failure to implement sufficient measures to ensure information security |
| 2020-03-03 | GDPR | $25,920 | Non-compliance with lawful basis for data processing |
| 2020-03-03 | GDPR | $43,200 | Non-compliance with lawful basis for data processing |
| 2020-03-03 | GDPR | $25,920 | Non-compliance with lawful basis for data processing |
| 2020-02-27 | GDPR | $129,600 | Non-compliance with lawful basis for data processing |
| 2020-02-27 | GDPR | $129,600 | Non-compliance with lawful basis for data processing |
| 2020-02-14 | GDPR | $45,360 | Failure to implement sufficient measures to ensure information security |
| 2020-02-14 | GDPR | $45,360 | Failure to implement sufficient measures to ensure information security |