Spain

Vodafone España, S.A.U.

40,000 €

GDPR enforcement action by Spanish Data Protection Authority (aepd) on 2020-03-03.

Rank · Sector

#214

of 369 in Media, Telecoms and Broadcasting

Rank · Spain

#263

of 1,075

Rank · All fines

#789

of 3,050

Case details

Authority: Spanish Data Protection Authority (aepd)
Date: 2020-03-03
Controller / Processor: Vodafone España, S.A.U.
Sector: Media, Telecoms and Broadcasting
Quoted Articles: Art. 5 GDPR, Art. 6 GDPR
Type of violation: Insufficient legal basis for data processing

Summary

According to the AEPD, the company sent an SMS to an clients mobile number confirming that a telephone contract with that number had been signed even though the client was not a Vodafone client, resulting in the processing of personal data without the data subjects consent or other legitimate interests of the company.

Open original source Links to the regulator's original publication or another source.