Search Privacy Fines
Browse and filter privacy enforcement fines worldwide.
663 fines found
Total: $51.8M
| Date | Company | Fine | Regulation | Authority | Country | Type | Summary |
|---|---|---|---|---|---|---|---|
| 2022-04-28 | Working Capital Management Espana, S.L. | €40K | GDPR | Spanish Data Protection Authority (AEPD) | Spain | Non-compliance with lawful basis for data processing | --Articles: Art. 6 (1) GDPR |
| 2021-10-13 | Vodafone Espana, S.A.U. | €40K | GDPR | Spanish Data Protection Authority (AEPD) | Spain | Non-compliance with lawful basis for data processing | --Articles: Art. 5 (1) f) GDPR, Art. 32 GDPR |
| 2021-11-23 | Vodafone Espana, SAU | €40K | GDPR | Spanish Data Protection Authority (AEPD) | Spain | Non-compliance with lawful basis for data processing | --Articles: Art. 6 (1) GDPR |
| 2020-07-20 | Iberia Lae SA Operadora Unipersonal | €40K | GDPR | Spanish Data Protection Authority (AEPD) | Spain | Non-cooperation with Data Protection Authority | --Articles: Art. 58 GDPR |
| 2020-03-03 | Vodafone España | €40K | GDPR | Spanish Data Protection Authority (AEPD) | Spain | Non-compliance with lawful basis for data processing | --Articles: Art. 5 GDPR |
| 2021-09-14 | Vodafone Espana, S.A.U. | €40K | GDPR | Spanish Data Protection Authority (AEPD) | Spain | Non-compliance with lawful basis for data processing | --Articles: Art. 6 (1) GDPR |
| 2021-11-23 | Vodafone Espana, S.A.U. | €40K | GDPR | Spanish Data Protection Authority (AEPD) | Spain | Failure to comply with data processing principles | --Articles: Art. 6 (1) GDPR |
| 2021-10-26 | Vodafone Servicios, S.L.U. | €40K | GDPR | Spanish Data Protection Authority (AEPD) | Spain | Failure to comply with data processing principles | --Articles: Art. 6 (1) GDPR |
| 2019-03-22 | Vodafone Espana | €40K | GDPR | Spanish Data Protection Authority (AEPD) | Spain | Non-compliance with lawful basis for data processing | --Articles: Art. 6 GDPR |
| 2019-01-01 | Vodafone Espana, S.A.U. | €40K | GDPR | Spanish Data Protection Authority (AEPD) | Spain | Failure to comply with data processing principles | --Articles: Art. 6 GDPR |
| 2023-01-16 | Thomas International Systems, S.A | €40K | GDPR | Spanish Data Protection Authority (AEPD) | Spain | Insufficient fulfilment of information obligations | --Articles: Art. 9 GDPR |
| 2021-10-19 | Vodafone Espana, S.A.U. | €40K | GDPR | Spanish Data Protection Authority (AEPD) | Spain | Failure to comply with data processing principles | --Articles: Art. 6 (1) GDPR |
| 2021-10-26 | Vodafone Servicios, S.L.U. | €40K | GDPR | Spanish Data Protection Authority (AEPD) | Spain | Failure to comply with data processing principles | --Articles: Art. 6 (1) GDPR |
| 2020-06-09 | Telefónica SA | €40K | GDPR | Spanish Data Protection Authority (AEPD) | Spain | Non-compliance with lawful basis for data processing | --Articles: Art. 6 GDPR |
| 2020-12-09 | Xfera Moviles S.A. | €40K | GDPR | Spanish Data Protection Authority (AEPD) | Spain | Failure to comply with data processing principles | --Articles: Art. 6 (1) GDPR |
| 2021-11-23 | Vodafone Espana, S.A.U. | €40K | GDPR | Spanish Data Protection Authority (AEPD) | Spain | Failure to comply with data processing principles | --Articles: Art. 6 (1) GDPR |
| 2023-03-10 | VODAFONE ONO, S.A.U. | €40K | GDPR | Spanish Data Protection Authority (AEPD) | Spain | Non-compliance with lawful basis for data processing | --Articles: Art. 6 (1) GDPR |
| 2021-11-15 | Vodafone ESPANA, SAU | €40K | GDPR | Spanish Data Protection Authority (AEPD) | Spain | Non-compliance with lawful basis for data processing | --Articles: Art. 6 (1) GDPR |
| 2020-03-03 | Vodafone España | €40K | GDPR | Spanish Data Protection Authority (AEPD) | Spain | Non-compliance with lawful basis for data processing | The company sent a text message to a person’s phone number informing them ...The company sent a text message to a person’s phone number informing them that their contract was modified. The affected person, however, was not actually a Vodafone client. The AEPD determined that Vodafone had processed the affected person’s personal details without consent. Articles: Art. 5 GDPR |
| 2022-07-22 | ESVETEL, S.L. | €40K | GDPR | Spanish Data Protection Authority (AEPD) | Spain | Non-cooperation with Data Protection Authority | --Articles: Art. 28 GDPR, Art. 48 (1) b) LGT |
| 2020-11-25 | Miraclia Telecomunicaciones S.L. | €40K | GDPR | Spanish Data Protection Authority (AEPD) | Spain | Failure to comply with data processing principles | --Articles: Art. 6 GDPR, Art. 13 GDPR, Art. 14 GDPR |
| 2019-03-22 | Vodafone Espana | €40K | GDPR | Spanish Data Protection Authority (AEPD) | Spain | Non-compliance with lawful basis for data processing | The claimant was charged for a Netflix subscription that they had not requested....The claimant was charged for a Netflix subscription that they had not requested. The claimant proved that the Netflix subscription was created by a different person who obtained the personal details of the claimant from Vodafone. The AEPD argued that the claimant did not consent to be charged the Netflix subscription, and as such had fined Vodafone with €40,000. Articles: Art. 6 GDPR |
| 2020-06-09 | Xfera Moviles S.A. | €39K | GDPR | Spanish Data Protection Authority (AEPD) | Spain | Non-compliance with lawful basis for data processing | --Articles: Art. 5 (1) f) GDPR |
| 2020-11-19 | Vodafone España, SAU | €36K | GDPR | Spanish Data Protection Authority (AEPD) | Spain | Failure to comply with data processing principles | --Articles: Art. 5 GDPR, Art. 6 GDPR |
| 2020-12-21 | Banco Bilbao Vizcaya Argentaria, S.A. | €36K | GDPR | Spanish Data Protection Authority (AEPD) | Spain | Failure to comply with data processing principles | --Articles: Art. 5 (1) d) GDPR |