Spain

Vodafone España, S.A.U.

60,000 €

GDPR enforcement action by Spanish Data Protection Authority (aepd) on 2020-03-04.

Rank · Sector

#160

of 369 in Media, Telecoms and Broadcasting

Rank · Spain

#181

of 1,075

Rank · All fines

#632

of 3,050

Case details

Authority: Spanish Data Protection Authority (aepd)
Date: 2020-03-04
Controller / Processor: Vodafone España, S.A.U.
Sector: Media, Telecoms and Broadcasting
Quoted Articles: Art. 5 GDPR, Art. 6 GDPR
Type of violation: Insufficient legal basis for data processing

Summary

According to the AEPD, the data subject has received several SMS from a separate operator indicating the activation of a new contract. The reason for this was that an employee of Vodafone España activated a contract with a third operator on behalf of the data subject. Vodafone could not demonstrate consent or sufficient legitimate interests for this processing of personal data.

Open original source Links to the regulator's original publication or another source.