Spain

Vodafone España, S.A.U.

60,000 €

GDPR enforcement action by Spanish Data Protection Authority (aepd) on 2020-02-03.

Rank · Sector

#159

of 369 in Media, Telecoms and Broadcasting

Rank · Spain

#180

of 1,075

Rank · All fines

#631

of 3,050

Case details

Authority: Spanish Data Protection Authority (aepd)
Date: 2020-02-03
Controller / Processor: Vodafone España, S.A.U.
Sector: Media, Telecoms and Broadcasting
Quoted Articles: Art. 5 GDPR, Art. 6 GDPR
Type of violation: Insufficient legal basis for data processing

Summary

The fine was preceded by a complaint from the data subject, who argued that he had received an e-mail from Vodafone España, which contained the billing of a telephone line that the data subject had never requested, which led to his personal data being processed without his consent. As a result, the data subject's personal data were incorporated into the information systems of Vodafone España without Vodafone being able to show that the data subject had consented to the collection and subsequent processing of his personal data. The fine of 100,000 EUR was reduced to 60,000 EUR due to a voluntary payment.

Open original source Links to the regulator's original publication or another source.