- Enforcing jurisdiction
- Spain · Geography does not establish applicable law.
- Confirmed applicable legislation
- Privacy topics
Vodafone España, S.A.U. – €100,000 Fine (Spain, 2022)
Privacy enforcement record
This record is classified outside cookie consent. Subject classification does not confirm an applicable law. It is not included in cookie statistics or the Risk Calculator.
Vodafone España, S.A.U. was fined EUR 100,000 for processing personal data without a valid legal basis. This is important because it shows that companies must verify contracts before using personal information.
What happened
Vodafone España, S.A.U. processed personal data linked to a prepaid line that was fraudulently registered in a customer's name.
Who was affected
A customer whose personal data was used without their consent to register a prepaid line.
What the authority found
The Spanish DPA ruled that Vodafone did not have a valid legal basis for processing the customer's personal data.
Why this matters
This ruling serves as a reminder for companies to verify the legitimacy of contracts before processing personal data. Businesses should have strong verification processes to avoid similar issues.
View original scraped data
Original imported citations before automated processing; the processing history does not establish independent verification.
Source checks
Linked-source text retrieved.
Review needed — 10 March 2026.
Processing notes: amount discrepancy.
Retrieved text may be a secondary summary or an announcement. These automated statuses do not establish that the original decision was read or that the record received an independent legal review. How we check sources
The Spanish DPA (AEPD) imposed a fine of EUR 100,00 on Vodafone España, S.A.U. due data processing without a sufficient legal basis. A data subject stated that a prepaid line of which charges were made, had been registered in their name. However, the data subject had never concluded a contract with the company for this line. Rather, the contract in question was concluded by fraudsters using the data subject's personal data. Nevertheless, the personal data was entered into the company's information systems without any verification as to whether the contract had been lawfully and actually concluded by the data subject.
Related Enforcement Actions (20)
Other enforcement actions involving Vodafone España, S.A.U. in ES
Fine
€100K
Details
Fine Date
28 December 2022
Authority
Agencia Española de Protección de Datos
Fine Amount
€100,000
Enforcement Tracker ID
ETid-1584
About this data
Cite as: Cookie Fines. Vodafone España, S.A.U. - Spain (2022). Retrieved from cookiefines.eu
Last updated: