Search Privacy Fines

Browse and filter privacy enforcement fines worldwide.

← Back to Overview

Regulation

Country

Year

Min Fine (USD)

Sort

2,028 fines found

Total: $8.1B

Date	Company	Fine	Regulation	Authority	Country	Type	Summary
2019-01-01	Vodafone Espana, S.A.U.	€40K	GDPR	Spanish Data Protection Authority (AEPD)	Spain	Failure to comply with data processing principles	-- Articles: Art. 6 GDPR
2021-11-23	Vodafone Espana, SAU	€40K	GDPR	Spanish Data Protection Authority (AEPD)	Spain	Non-compliance with lawful basis for data processing	-- Articles: Art. 6 (1) GDPR
2021-10-26	Vodafone Servicios, S.L.U.	€40K	GDPR	Spanish Data Protection Authority (AEPD)	Spain	Failure to comply with data processing principles	-- Articles: Art. 6 (1) GDPR
2021-11-15	Vodafone ESPANA, SAU	€40K	GDPR	Spanish Data Protection Authority (AEPD)	Spain	Non-compliance with lawful basis for data processing	-- Articles: Art. 6 (1) GDPR
2021-10-26	Vodafone Servicios, S.L.U.	€40K	GDPR	Spanish Data Protection Authority (AEPD)	Spain	Failure to comply with data processing principles	-- Articles: Art. 6 (1) GDPR
2021-10-13	Vodafone Espana, S.A.U.	€40K	GDPR	Spanish Data Protection Authority (AEPD)	Spain	Non-compliance with lawful basis for data processing	-- Articles: Art. 5 (1) f) GDPR, Art. 32 GDPR
2019-09-27	Slovak Telekom	€40K	GDPR	Slovak Data Protection Office	Slovakia	Failure to implement sufficient measures to ensure information security	-- Articles: Art. 32 GDPR
2023-03-10	VODAFONE ONO, S.A.U.	€40K	GDPR	Spanish Data Protection Authority (AEPD)	Spain	Non-compliance with lawful basis for data processing	-- Articles: Art. 6 (1) GDPR
2022-09-16	FCA Italy S.p.A.	€40K	GDPR	Italian Data Protection Authority (Garante)	Italy	Non-compliance with subjects' rights protection safeguards	-- Articles: Art. 12 (1), (2), (3), (4) GDPR, Art. 15 GDPR
2022-04-28	Il Sole 24 Ore S.p.a.	€40K	GDPR	Italian Data Protection Authority (Garante)	Italy	Failure to comply with data processing principles	-- Articles: Art. 5 GDPR, Art. 9 GDPR, Art. 12 GDPR
2020-12-09	Xfera Moviles S.A.	€40K	GDPR	Spanish Data Protection Authority (AEPD)	Spain	Failure to comply with data processing principles	-- Articles: Art. 6 (1) GDPR
2019-03-22	Vodafone Espana	€40K	GDPR	Spanish Data Protection Authority (AEPD)	Spain	Non-compliance with lawful basis for data processing	The claimant was charged for a Netflix subscription that they had not requested.... The claimant was charged for a Netflix subscription that they had not requested. The claimant proved that the Netflix subscription was created by a different person who obtained the personal details of the claimant from Vodafone. The AEPD argued that the claimant did not consent to be charged the Netflix subscription, and as such had fined Vodafone with €40,000. Articles: Art. 6 GDPR
2021-03-03	Electricity Authority of Cyprus	€40K	GDPR	Cypriot Data Protection Commissioner	Cyprus	Non-compliance with lawful basis for data processing	-- Articles: Art. 6 (1) GDPR, Art. 9 (2) GDPR
2020-06-09	Telefónica SA	€40K	GDPR	Spanish Data Protection Authority (AEPD)	Spain	Non-compliance with lawful basis for data processing	-- Articles: Art. 6 GDPR
2021-09-06	Hellenic Technical Enterprises Ltd.	€40K	GDPR	Cypriot Data Protection Commissioner	Cyprus	Failure to implement sufficient measures to ensure information security	-- Articles: Art. 32 GDPR
2020-07-20	Iberia Lae SA Operadora Unipersonal	€40K	GDPR	Spanish Data Protection Authority (AEPD)	Spain	Non-cooperation with Data Protection Authority	-- Articles: Art. 58 GDPR
2021-11-23	Vodafone Espana, S.A.U.	€40K	GDPR	Spanish Data Protection Authority (AEPD)	Spain	Failure to comply with data processing principles	-- Articles: Art. 6 (1) GDPR
2019-09-27	Slovak Telekom	€40K	GDPR	Slovak Data Protection Office	Slovakia	Failure to implement sufficient measures to ensure information security	The data controller did not take the necessary technical measures to prevent a d... The data controller did not take the necessary technical measures to prevent a data breach. No further details have been disclosed. Articles: Art. 32 GDPR
2021-09-06	APOEL FC	€40K	GDPR	Cypriot Data Protection Commissioner	Cyprus	Failure to implement sufficient measures to ensure information security	-- Articles: Art. 32 GDPR
2021-10-19	Vodafone Espana, S.A.U.	€40K	GDPR	Spanish Data Protection Authority (AEPD)	Spain	Failure to comply with data processing principles	-- Articles: Art. 6 (1) GDPR
2021-09-14	Vodafone Espana, S.A.U.	€40K	GDPR	Spanish Data Protection Authority (AEPD)	Spain	Non-compliance with lawful basis for data processing	-- Articles: Art. 6 (1) GDPR
2022-04-07	ISWEB S.p.A.	€40K	GDPR	Italian Data Protection Authority (Garante)	Italy	Non-compliance with subjects' rights protection safeguards	-- Articles: Art. 28 GDPR
2022-07-22	ESVETEL, S.L.	€40K	GDPR	Spanish Data Protection Authority (AEPD)	Spain	Non-cooperation with Data Protection Authority	-- Articles: Art. 28 GDPR, Art. 48 (1) b) LGT
2019-03-22	Vodafone Espana	€40K	GDPR	Spanish Data Protection Authority (AEPD)	Spain	Non-compliance with lawful basis for data processing	-- Articles: Art. 6 GDPR
2020-06-30	Tusla Child and Family Agency	€40K	GDPR	Data Protection Authority of Ireland	Ireland	Failure to implement sufficient measures to ensure information security	-- Articles: Art. 33 GDPR

PreviousPage 24 of 82Next