Search Privacy Fines
Browse and filter privacy enforcement fines worldwide.
663 fines found
Total: $51.8M
| Date | Company | Fine | Regulation | Authority | Country | Type | Summary |
|---|---|---|---|---|---|---|---|
| 2019-10-23 | Vodafone Espana | €60K | GDPR | Spanish Data Protection Authority (AEPD) | Spain | Failure to implement sufficient measures to ensure information security | Invoicing details of a customer were sent to a third party customer during an in...Invoicing details of a customer were sent to a third party customer during an invoicing complaint. Articles: Art. 5 (1) f) GDPR |
| 2019-11-19 | Corporacion RTVE | €60K | GDPR | Spanish Data Protection Authority (AEPD) | Spain | Failure to implement sufficient measures to ensure information security | Corporacion de Radio y Television Espanola lost 6 USB sticks with unencrypted pe...Corporacion de Radio y Television Espanola lost 6 USB sticks with unencrypted personal information and data. Articles: Art. 32 GDPR |
| 2019-11-06 | Vodafone Espana | €60K | GDPR | Spanish Data Protection Authority (AEPD) | Spain | Non-compliance with lawful basis for data processing | Vodafone sent customers invoicing details to a third party after a customer invo...Vodafone sent customers invoicing details to a third party after a customer invoicing complaint. The fine was originally determined to be €75,000 but later reduced to €60,000 after the quick cooperation of the company. Articles: Art. 6 GDPR |
| -- | Gestion De Cobros Yo Cobro SL | €60K | GDPR | Spanish Data Protection Authority (AEPD) | Spain | Non-compliance with lawful basis for data processing | --Articles: Art. 5 (1) f) GDPR |
| 2020-09-17 | Vodafone España, SAU | €60K | GDPR | Spanish Data Protection Authority (AEPD) | Spain | Non-compliance with lawful basis for data processing | --Articles: Art. 5 GDPR, Art. 6 GDPR |
| 2021-07-27 | PRA Iberia S.L. | €60K | GDPR | Spanish Data Protection Authority (AEPD) | Spain | Non-compliance with lawful basis for data processing | --Articles: Art. 6 (1) GDPR, Art. 15 GDPR |
| 2019-11-19 | Corporacion RTVE | €60K | GDPR | Spanish Data Protection Authority (AEPD) | Spain | Failure to implement sufficient measures to ensure information security | --Articles: Art. 32 GDPR |
| 2020-11-06 | Vodafone Espana, S.A.U. | €60K | GDPR | Spanish Data Protection Authority (AEPD) | Spain | Failure to comply with data processing principles | --Articles: Art. 6 GDPR |
| 2019-10-23 | Vodafone Espana, S.A.U. | €60K | GDPR | Spanish Data Protection Authority (AEPD) | Spain | Non-compliance with lawful basis for data processing | --Articles: Art. 5 (1) f) GDPR |
| 2020-09-25 | Xfera Moviles S.A. | €60K | GDPR | Spanish Data Protection Authority (AEPD) | Spain | Failure to comply with data processing principles | --Articles: Art. 5 GDPR, Art. 6 GDPR |
| 2021-03-16 | Vodafone Espana | €60K | GDPR | Spanish Data Protection Authority (AEPD) | Spain | Failure to comply with data processing principles | --Articles: Art. 6 (1) GDPR |
| 2020-10-06 | Lycamobile | €60K | GDPR | Spanish Data Protection Authority (AEPD) | Spain | Failure to comply with data processing principles | --Articles: Art. 5 GDPR, Art. 6 GDPR |
| 2019-10-23 | Vodafone Espana | €60K | GDPR | Spanish Data Protection Authority (AEPD) | Spain | Failure to implement sufficient measures to ensure information security | --Articles: Art. 5 (1) f) GDPR |
| 2019-10-16 | Xfera Moviles S.A. | €60K | GDPR | Spanish Data Protection Authority (AEPD) | Spain | Non-compliance with lawful basis for data processing | The company had unlawfully processed the personal data despite the subject’s req...The company had unlawfully processed the personal data despite the subject’s request to stop doing so. Articles: Art. 5 GDPR, Art. 6 GDPR |
| 2020-09-22 | GLP Instalaciones 86, SL | €60K | GDPR | Spanish Data Protection Authority (AEPD) | Spain | Failure to comply with data processing principles | --Articles: Art. 5 GDPR, Art. 6 GDPR |
| 2019-08-16 | Avon Cosmetics | €60K | GDPR | Spanish Data Protection Authority (AEPD) | Spain | Non-compliance with lawful basis for data processing | A client had complained that AVOND COSMETICS hadn’t observed the law when it pro...A client had complained that AVOND COSMETICS hadn’t observed the law when it processed his personal data erroneously. His identity wasn’t properly verified, which led to the erroneous matching of that client with a register of claims. As a result, the client wasn’t able to work with his bank. Moreover, a third-party utilized the client’s personal data unlawfully. Articles: Art. 6 GDPR |
| 2019-08-16 | Avon Cosmetics | €60K | GDPR | Spanish Data Protection Authority (AEPD) | Spain | Non-compliance with lawful basis for data processing | --Articles: Art. 6 GDPR |
| 2022-01-18 | Vodafone Espana, S.A.U. | €56K | GDPR | Spanish Data Protection Authority (AEPD) | Spain | Failure to comply with data processing principles | --Articles: Art. 6 (1) GDPR |
| 2023-01-16 | Vodafone Espana, S.A.U. | €56K | GDPR | Spanish Data Protection Authority (AEPD) | Spain | Non-compliance with lawful basis for data processing | --Articles: Art. 6 (1) GDPR |
| 2022-12-13 | Vodafone Espana, S.A.U. | €56K | GDPR | Spanish Data Protection Authority (AEPD) | Spain | Non-compliance with lawful basis for data processing | --Articles: Art. 6 (1) GDPR |
| 2021-09-14 | Vodafone Espana, S.A.U. | €56K | GDPR | Spanish Data Protection Authority (AEPD) | Spain | Non-compliance with lawful basis for data processing | --Articles: Art. 6 (1) GDPR |
| 2022-10-31 | Vodafone Espana, S.A.U. | €56K | GDPR | Spanish Data Protection Authority (AEPD) | Spain | Failure to implement sufficient measures to ensure information security | --Articles: Art. 5 (1) f) GDPR, Art. 32 GDPR |
| 2021-09-14 | Vodafone Espana, S.A.U. | €56K | GDPR | Spanish Data Protection Authority (AEPD) | Spain | Non-compliance with lawful basis for data processing | --Articles: Art. 6 (1) |
| 2021-09-14 | Vodafone Espana, S.A.U. | €56K | GDPR | Spanish Data Protection Authority (AEPD) | Spain | Non-compliance with lawful basis for data processing | --Articles: Art. 6 (1) GDPR |
| 2022-12-13 | Vodafone Espana, S.A.U. | €56K | GDPR | Spanish Data Protection Authority (AEPD) | Spain | Non-compliance with lawful basis for data processing | --Articles: Art. 6 (1) GDPR |