Spain
Vodafone España, S.A.U.
60,000 €
GDPR enforcement action by Spanish Data Protection Authority (aepd) on 2019-11-06.
Rank · Sector
#153
of 366 in Media, Telecoms and Broadcasting
Rank · Spain
#173
of 1,070
Rank · All fines
#620
of 3,039
Case details
- Authority
- Spanish Data Protection Authority (aepd)
- Date
- 2019-11-06
- Controller / Processor
- Vodafone España, S.A.U.
- Sector
- Media, Telecoms and Broadcasting
- Quoted Articles
- Art. 6 GDPR
- Type of violation
- Insufficient legal basis for data processing
Summary
Vodafone has sent the customer's invoice data to unauthorised third parties following a customer invoice complaint. Originally, a fine of EUR 75,000 was threatened, but was reduced to EUR 60,000 against immediate payment and waiver of appeal.
Open original source
Links to the regulator's original publication or another source.
Related fines
Spain
2025-11-06
10,043,002 €
ETid-2962
Aena, S.M.E., S.A.
Transportation and Energy
Spain
2022-05-18
10,000,000 €
ETid-1176
Google LLC
Media, Telecoms and Broadcasting
Spain
2021-03-11
8,150,000 €
ETid-594
Vodafone España, S.A.U.
Media, Telecoms and Broadcasting
Spain
2023-12-27
6,500,000 €
ETid-2532
THE PHONE HOUSE SPAIN, S.L.
Media, Telecoms and Broadcasting
Spain
2023-10-25
6,100,000 €
ETid-2220
ENDESA ENERGÍA, S.A.U.
Transportation and Energy
Spain
2020-12-11
5,000,000 €
ETid-481
Banco Bilbao Vizcaya Argentaria, S.A.
Finance, Insurance and Consulting