Spain

VODAFONE ONO, S.A.U.

40,000 €

GDPR enforcement action by Spanish Data Protection Authority (aepd) on 2023-03-10.

Rank · Sector

#232

of 369 in Media, Telecoms and Broadcasting

Rank · Spain

#282

of 1,075

Rank · All fines

#824

of 3,050

Case details

Authority: Spanish Data Protection Authority (aepd)
Date: 2023-03-10
Controller / Processor: VODAFONE ONO, S.A.U.
Sector: Media, Telecoms and Broadcasting
Quoted Articles: Art. 6 (1) GDPR
Type of violation: Insufficient legal basis for data processing

Summary

The Spanish DPA has imposed a fine on VODAFONE ONO, S.A.U.. The controller had carried out a credit check on an individual without there being a customer relationship or other affiliation. The personal data of the data subject was thus processed without a legal basis.The original fine of EUR 50,000 was reduced to EUR 40,000 for voluntary payment.

Open original source Links to the regulator's original publication or another source.