Enforcing jurisdiction
Spain · Geography does not establish applicable law.
Confirmed applicable legislation

Vodafone España, SAU – €60,000 Fine (Spain, 2020)

€60,000Agencia Española de Protección de Datos4 August 2020Spain
final
Fine

Privacy enforcement record

This record is classified outside cookie consent. Subject classification does not confirm an applicable law. It is not included in cookie statistics or the Risk Calculator.

Vodafone mistakenly confirmed a number porting that was never requested by a customer. This error raises concerns about how companies manage personal data and customer requests. The fine of €60,000 highlights the need for accurate data handling practices.

What happened

Vodafone confirmed a number porting that it had not authorized or commissioned.

Who was affected

The customer who received the incorrect confirmation regarding their phone number.

What the authority found

The authority found that Vodafone violated GDPR rules by mishandling personal data related to the number porting process.

Why this matters

This incident underscores the importance of accurate data management for companies. Businesses must ensure that customer requests are handled correctly to avoid privacy violations.

Recorded legal citations
Automatically processed
Art. 5 GDPR
Art. 6 GDPR
View original scraped data
Art. 5(GDPR)
Art. 6(GDPR)

Original imported citations before automated processing; the processing history does not establish independent verification.

Source checks

Linked-source text retrieved.

Automated check recorded — 12 March 2026.

Processing notes: articles corrected, national law identified.

Retrieved text may be a secondary summary or an announcement. These automated statuses do not establish that the original decision was read or that the record received an independent legal review. How we check sources

Spain enforcementAgencia Española de Protección de Datos actionsAll Vodafone España, SAU actions
Full Legal Summary
Detailed

The data subject received confirmation from Vodafone of a number porting, which the latter had never commissioned.

Related Enforcement Actions (6)

Other enforcement actions involving Vodafone España, SAU in ES

Fine
Jul 2020· Agencia Española de Protección de Datos

Fines for violation of Art. 5 (1) d) GDPR for changing the customer's master data into the name of a third party, the ex-spouse of the customer.

€12K
Current
Aug 2020

Fine

€60K

Fine
Sept 2020· Agencia Española de Protección de Datos

A former customer had received e-mails containing electronic bills even after he had terminated his contract with the company resulting in a processin...

€60K
Fine
Feb 2021· Agencia Española de Protección de Datos

The Spanish DPA (AEPD) imposed a fine of EUR 200,000 on Vodafone España, S.A.U. A former customer had received e-mails containing electronic bills eve...

€120K
Fine
Nov 2021· Agencia Española de Protección de Datos

The Spanish DPA (AEPD) has imposed a fine on Vodafone España SAU. An individual had filed a complaint with the DPA. The data subject claims to have re...

€40K
Fine
Nov 2021· Agencia Española de Protección de Datos

The Spanish DPA (AEPD) has imposed a fine on Vodafone España SAU. A data subject had filed a complaint with the AEPD against the data controller. The ...

€30K
Fine
Nov 2021· Agencia Española de Protección de Datos

The Spanish DPA (AEPD) has fined Vodafone España S.A.U. EUR 40,000. An individual had filed a complaint against Vodafone with the DPA because her cell...

€40K

Details

Fine Date

4 August 2020

Authority

Agencia Española de Protección de Datos

Fine Amount

€60,000

Sources

About this data

Data: CMS GDPR Enforcement Tracker
Licensed under CC BY-NC-SA 4.0
Automatically normalized and classified

Cite as: Cookie Fines. Vodafone España, SAU - Spain (2020). Retrieved from cookiefines.eu

Report Inaccuracy

Last updated: