Vodafone España, S.A.U. – €54,000 Fine (Spain, 2021)
General GDPR enforcement action
This case relates to broader data protection obligations, not specifically to cookie or consent banner compliance. It is not included in cookie statistics or the Risk Calculator.
Vodafone España was fined for mixing up a customer's data with someone else's due to a system error. The company failed to correct the mistake promptly, affecting the customer's privacy. This case shows the importance of maintaining accurate data records.
What happened
Vodafone España delivered products under a customer's contract in the name of a third party due to a system error.
Who was affected
The customer whose data was incorrectly recorded and used by Vodafone España.
What the authority found
The Spanish DPA ruled that Vodafone España violated GDPR by not maintaining accurate data and failing to address the customer's correction request.
Why this matters
This case highlights the critical need for companies to ensure data accuracy and respond promptly to correction requests. It serves as a reminder to regularly audit data systems to prevent errors.
GDPR Articles Cited
The data subject had concluded a contract with the controller (Vodafone España, S.A.U.). However, the products provided under this contract were not delivered in the name of the data subject, but in the name of a third party. Subsequently, the data subject contacted the company's data protection officer by e-mail in order to restore the accuracy of his/her data stored at Vodafone. However, no response was received to this request. When the data subject finally contacted the telecommunications company by telephone, he/she was addressed by the name of the third party. His/her inquiry was answered with a response that did not refer to his/her inquiry, but to the inquiry of the third party. According to the telecommunications company, the incident was caused by a defect in their system due to a system migration. The Spanish DPA (AEPD) initially fined Vodafone España, S.A.U. EUR 90,000, but the original fine was reduced to EUR 54,000 due to the timely payment and admission of guilt.
Related Enforcement Actions (20)
Other enforcement actions involving Vodafone España, S.A.U. in ES
Fine
€54K
Details
Fine Date
4 January 2021
Authority
Agencia Española de Protección de Datos
Fine Amount
€54,000
Enforcement Tracker ID
ETid-506
About this data
Cite as: Cookie Fines. Vodafone España, S.A.U. - Spain (2021). Retrieved from cookiefines.eu
Last updated: