VODAFONE SERVICIOS, S.L.U. – €40,000 Fine (Spain, 2021)

€40,000Agencia Española de Protección de Datos26 October 2021Spain
reduced
Fine

General GDPR enforcement action

This case relates to broader data protection obligations, not specifically to cookie or consent banner compliance. It is not included in cookie statistics or the Risk Calculator.

VODAFONE SERVICIOS was fined after a customer complained about receiving bills for services they didn't order. Fraudsters had used the customer's personal information to create a fake contract, and the company failed to check if the contract was valid. This case shows the importance of verifying customer information to prevent fraud.

What happened

VODAFONE SERVICIOS allowed a fraudulent contract to be created using a customer's personal data without proper verification.

Who was affected

A customer who was billed for services they did not sign up for due to identity theft.

What the authority found

The authority determined that the company did not have a valid legal basis for processing the customer's data.

Why this matters

This ruling stresses the importance of verifying customer identities to prevent fraud and protect personal data.

GDPR Articles Cited

AI-verified

Art. 6(1) GDPR
View original scraped data
Art. 6(1) GDPR

Original data from scraper before AI verification against source document.

Source verified 4 April 2026
national law identified
Full Legal Summary
Detailed

The Spanish DPA (AEPD) has imposed a fine on VODAFONE SERVICIOS, S.L.U.. A data subject has filed a complaint with the AEPD against the data controller. The data subject states that she received invoices and debits on her bank account for the payment of Vodafone services that she had not booked herself. The data subject also stated that she was receiving calls from the collection company Bureau Veritas asking her to pay for these services. As it turned out, fraudsters had used the data subject's personal data to conclude a service contract. However, the personal data had been entered into the company's information systems without any verification that the contract was lawful and had actually been concluded by the data subject. The original fine of EUR 50,000 was reduced to EUR 40,000 due to the voluntary payment.

Related Enforcement Actions (0)

No other enforcement actions found for VODAFONE SERVICIOS, S.L.U. in ES

This is the only recorded action for this entity in this jurisdiction.

Details

Fine Date

26 October 2021

Authority

Agencia Española de Protección de Datos

Fine Amount

€40,000

Enforcement Tracker ID

ETid-889

About this data

Data: CMS GDPR Enforcement Tracker
Licensed under CC BY-NC-SA 4.0
AI-verified and classified

Cite as: Cookie Fines. VODAFONE SERVICIOS, S.L.U. - Spain (2021). Retrieved from cookiefines.eu

Report Inaccuracy

Last updated: