Spain

Vodafone España, S.A.U.

42,000 €

GDPR enforcement action by Spanish Data Protection Authority (aepd) on 2020-03-03.

Rank · Sector

#210

of 371 in Media, Telecoms and Broadcasting

Rank · Spain

#254

of 1,079

Rank · All fines

#787

of 3,085

Case details

Authority: Spanish Data Protection Authority (aepd)
Date: 2020-03-03
Controller / Processor: Vodafone España, S.A.U.
Sector: Media, Telecoms and Broadcasting
Quoted Articles: Art. 5 (1) f) GDPR, Art. 32 GDPR
Type of violation: Insufficient technical and organisational measures to ensure information security

Summary

According to the AEPD, the company had not been able to demonstrate adequate measures to ensure information security, leading to unauthorized access to personal data of a client.

Open original source Links to the regulator's original publication or another source.