Spain

Vodafone España, S.A.U.

42,000 €

GDPR enforcement action by Spanish Data Protection Authority (aepd) on 2020-03-03.

Rank · Sector

#208

of 369 in Media, Telecoms and Broadcasting

Rank · Spain

#251

of 1,075

Rank · All fines

#774

of 3,050

Case details

Authority: Spanish Data Protection Authority (aepd)
Date: 2020-03-03
Controller / Processor: Vodafone España, S.A.U.
Sector: Media, Telecoms and Broadcasting
Quoted Articles: Art. 5 (1) f) GDPR, Art. 32 GDPR
Type of violation: Insufficient technical and organisational measures to ensure information security

Summary

According to the AEPD, the company had not been able to demonstrate adequate measures to ensure information security, leading to unauthorized access to personal data of a client.

Open original source Links to the regulator's original publication or another source.