Enforcing jurisdiction
Spain · Geography does not establish applicable law.
Confirmed applicable legislation
Privacy topics

Vodafone España, S.A.U. – €42,000 Fine (Spain, 2020)

€42,000Agencia Española de Protección de Datos14 February 2020Spain
final
Fine

Privacy enforcement record

This record is classified outside cookie consent. Subject classification does not confirm an applicable law. It is not included in cookie statistics or the Risk Calculator.

Vodafone España, S.A.U. allowed a customer to access third-party data in their personal profile. This breach of privacy rules led to a fine of EUR 42,000. Companies must ensure that customer profiles are secure and do not expose sensitive information.

What happened

Vodafone España, S.A.U. permitted a customer to access third-party data in their personal profile.

Who was affected

The customer who accessed the unauthorized third-party data.

What the authority found

The authority found that the company failed to protect personal data adequately.

Why this matters

This case highlights the need for companies to implement strong security measures to protect customer data. Ensuring privacy is essential for maintaining customer trust.

Recorded legal citations
Automatically processed
Art. 32 GDPR
Art. 5(1)(f) GDPR
View original scraped data
Art. 5(1) f) GDPR
Art. 32(GDPR)

Original imported citations before automated processing; the processing history does not establish independent verification.

Source checks

Linked-source text retrieved.

Automated check recorded — 12 March 2026.

Processing notes: articles corrected, national law identified.

Retrieved text may be a secondary summary or an announcement. These automated statuses do not establish that the original decision was read or that the record received an independent legal review. How we check sources

Spain enforcementAgencia Española de Protección de Datos actionsAll Vodafone España, S.A.U. actions
Full Legal Summary
Detailed

The complainant had access to third party data in his personal Vodafone profile.

Related Enforcement Actions (4)

Other enforcement actions involving Vodafone España, S.A.U. in ES

Current
Feb 2020

Fine

€42K

Fine
Mar 2020· Agencia Española de Protección de Datos

According to the AEPD, the company had not been able to demonstrate adequate measures to ensure information security, leading to unauthorized access t...

€42K
Fine
Oct 2021· Agencia Española de Protección de Datos

The Spanish DPA has imposed a fine on Vodafone España, S.A.U.. A woman filed a complaint against the controller based on the fact that the controller ...

€40K
Fine
Oct 2022· Agencia Española de Protección de Datos

The Spanish DPA has imposed a fine on Vodafone España, S.A.U.. A person had filed a complaint with the DPA for having unsuccessfully requested a copy ...

€56K
Fine
Mar 2023· Agencia Española de Protección de Datos

The Spanish DPA (AEPD) has imposed a fine on Vodafone España, S.A.U. A data subject had filed a complaint against the data controller as unauthorized ...

€136K

Details

Fine Date

14 February 2020

Authority

Agencia Española de Protección de Datos

Fine Amount

€42,000

Sources

About this data

Data: CMS GDPR Enforcement Tracker
Licensed under CC BY-NC-SA 4.0
Automatically normalized and classified

Cite as: Cookie Fines. Vodafone España, S.A.U. - Spain (2020). Retrieved from cookiefines.eu

Report Inaccuracy

Last updated: