- Enforcing jurisdiction
- Spain · Geography does not establish applicable law.
- Confirmed applicable legislation
- Privacy topics
VODAFONE ESPAÑA, S.A.U. – €100,000 Fine (Spain, 2024)
Privacy enforcement record
This record is classified outside cookie consent. Subject classification does not confirm an applicable law. It is not included in cookie statistics or the Risk Calculator.
VODAFONE ESPAÑA was fined EUR 100,000 by the Spanish DPA for not having a valid legal basis to process a user's data. This case highlights the need for companies to verify the legality of data processing activities. Businesses should ensure they have proper checks in place to prevent unauthorized data processing.
What happened
VODAFONE ESPAÑA was fined for insufficient legal basis for processing a user's data without their consent.
Who was affected
A user whose mobile line was fraudulently ported without their consent was affected.
What the authority found
The DPA determined that VODAFONE ESPAÑA failed to verify the legitimacy of contracts related to the user's data processing.
Why this matters
This ruling serves as a warning to companies about the importance of verifying user consent and the legality of data processing. Businesses should strengthen their verification processes to avoid similar issues.
View original scraped data
Original imported citations before automated processing; the processing history does not establish independent verification.
Source checks
Linked-source text retrieved.
Automated check recorded — 10 March 2026.
Processing notes: national law identified.
Retrieved text may be a secondary summary or an announcement. These automated statuses do not establish that the original decision was read or that the record received an independent legal review. How we check sources
The Spanish DPA imposed a fine of EUR 100,000 on VODAFONE ESPAÑA, S.A.U. for insufficient legal basis for data processing. The data subject had filed a complaint against the controller due to the fact that fraudulent third parties had requested the portability of their mobile line without their consent and had concluded a contract for the purchase of a cell phone in their name. The controller failed to adequately verify whether the contracts were lawful and had actually been concluded by the data subject.
Related Enforcement Actions (5)
Other enforcement actions involving VODAFONE ESPAÑA, S.A.U. in ES
Fine
€100K
Details
Fine Date
13 February 2024
Authority
Agencia Española de Protección de Datos
Fine Amount
€100,000
Enforcement Tracker ID
ETid-2272
About this data
Cite as: Cookie Fines. VODAFONE ESPAÑA, S.A.U. - Spain (2024). Retrieved from cookiefines.eu
Last updated: