Spain

Vodafone España, S.A.U.

120,000 €

GDPR enforcement action by Spanish Data Protection Authority (aepd) on 2020-02-27.

Rank · Sector

#104

of 369 in Media, Telecoms and Broadcasting

Rank · Spain

#90

of 1,075

Rank · All fines

#433

of 3,050

Case details

Authority: Spanish Data Protection Authority (aepd)
Date: 2020-02-27
Controller / Processor: Vodafone España, S.A.U.
Sector: Media, Telecoms and Broadcasting
Quoted Articles: Art. 5 GDPR, Art. 6 GDPR
Type of violation: Insufficient legal basis for data processing

Summary

Vodafone España was unable to prove to the data protection authority that the data subject had given his consent to the processing of his personal data for the provision of a telephone contract. Furthermore, the decision of the data protection authority emphasises that Vodafone España also unlawfully disclosed the personal data of the data subject to various credit agencies.

Open original source Links to the regulator's original publication or another source.