Spain
Vodafone ONO, S.A.U.
48,000 €
GDPR enforcement action by Spanish Data Protection Authority (aepd) on 2020-02-28.
Rank · Sector
#204
of 371 in Media, Telecoms and Broadcasting
Rank · Spain
#243
of 1,079
Rank · All fines
#764
of 3,085
Case details
- Authority
- Spanish Data Protection Authority (aepd)
- Date
- 2020-02-28
- Controller / Processor
- Vodafone ONO, S.A.U.
- Sector
- Media, Telecoms and Broadcasting
- Quoted Articles
- Art. 32 GDPR
- Type of violation
- Insufficient technical and organisational measures to ensure information security
Summary
The decision was taken due to several deficiencies in information security. For example, two people were given the same security access key.
Open original source
Links to the regulator's original publication or another source.
Related fines
Spain
2025-04-07
14,400,000 €
ETid-3192
AMADEUS IT GROUP, S.A.
Transportation and Energy
Spain
2025-11-06
10,043,002 €
ETid-2962
Aena, S.M.E., S.A.
Transportation and Energy
Spain
2022-05-18
10,000,000 €
ETid-1176
Google LLC
Media, Telecoms and Broadcasting
Spain
2021-03-11
8,150,000 €
ETid-594
Vodafone España, S.A.U.
Media, Telecoms and Broadcasting
Spain
2023-12-27
6,500,000 €
ETid-2532
THE PHONE HOUSE SPAIN, S.L.
Media, Telecoms and Broadcasting
Spain
2023-10-25
6,100,000 €
ETid-2220
ENDESA ENERGÍA, S.A.U.
Transportation and Energy