VODAFONE ESPAÑA, S.A.U. – €100,000 Fine (Spain, 2024)
General GDPR enforcement action
This case relates to broader data protection obligations, not specifically to cookie or consent banner compliance. It is not included in cookie statistics or the Risk Calculator.
Vodafone España, S.A.U. was fined again for allowing fraudsters to take over a customer's mobile line without permission. The company did not check if the requests for portability were legitimate, which led to unauthorized contracts. This incident stresses the importance of thorough verification processes for businesses handling customer data.
What happened
Fraudulent third parties requested the portability of a customer's mobile line without their consent, leading to unauthorized contracts.
Who was affected
A customer whose mobile line was taken over by fraudsters without their knowledge or consent.
What the authority found
The Spanish data protection authority found that Vodafone lacked a valid legal basis for processing the customer's data, violating GDPR requirements.
Why this matters
This ruling serves as a reminder for companies to ensure they have proper checks in place to verify the legitimacy of data requests. Strong verification processes are essential to protect customers from fraud.
GDPR Articles Cited
View original scraped data
Original data from scraper before AI verification against source document.
The Spanish DPA imposed a fine of EUR 100,000 on VODAFONE ESPAÑA, S.A.U. for insufficient legal basis for data processing. The data subject had filed a complaint against the controller due to the fact that fraudulent third parties had requested the portability of their mobile line without their consent and had concluded a contract for the purchase of a cell phone in their name. The controller failed to adequately verify whether the contracts were lawful and had actually been concluded by the data subject.
Related Enforcement Actions (8)
Other enforcement actions involving VODAFONE ESPAÑA, S.A.U. in ES
Fine
€100K
Details
Fine Date
13 February 2024
Authority
Agencia Española de Protección de Datos
Fine Amount
€100,000
Enforcement Tracker ID
ETid-2272
About this data
Cite as: Cookie Fines. VODAFONE ESPAÑA, S.A.U. - Spain (2024). Retrieved from cookiefines.eu
Last updated: