Spain

Vodafone España, S.A.U.

42,000 €

GDPR enforcement action by Spanish Data Protection Authority (aepd) on 2020-03-03.

Rank · Sector

#205

of 366 in Media, Telecoms and Broadcasting

Rank · Spain

#247

of 1,071

Rank · All fines

#767

of 3,042

Case details

Authority: Spanish Data Protection Authority (aepd)
Date: 2020-03-03
Controller / Processor: Vodafone España, S.A.U.
Sector: Media, Telecoms and Broadcasting
Quoted Articles: Art. 5 (1) f) GDPR, Art. 32 GDPR
Type of violation: Insufficient technical and organisational measures to ensure information security

Summary

According to the AEPD, the company had not been able to demonstrate adequate measures to ensure information security, leading to unauthorized access to personal data of a client.

Open original source Links to the regulator's original publication or another source.