Spain

Vodafone España, S.A.U.

27,000 €

GDPR enforcement action by Spanish Data Protection Authority (aepd) on Unknown.

Rank · Sector

#262

of 366 in Media, Telecoms and Broadcasting

Rank · Spain

#310

of 1,071

Rank · All fines

#932

of 3,042

Case details

Authority: Spanish Data Protection Authority (aepd)
Date: Unknown
Controller / Processor: Vodafone España, S.A.U.
Sector: Media, Telecoms and Broadcasting
Quoted Articles: Art. 5 (1) d) GDPR
Type of violation: Insufficient fulfilment of data subjects rights

Summary

Although the complainant (a former Vodafone customer) had requested Vodafone to delete his data in 2015 and this request had been confirmed by the company, he received more than 200 SMS from the company from 2018 onwards. Following Vodafone's statement, this happened because the complainant's mobile phone number was erroneously used for testing purposes and accidentally appeared in various customer files belonging to other customers than the complainant.
Since the company agreed to both payment and admission of responsibility the fine was reduced in accordance with Spanish administrative law to EUR 27k.

Open original source Links to the regulator's original publication or another source.