VODAFONE SERVICIOS, S.L.U. – €40,000 Fine (Spain, 2021)
General GDPR enforcement action
This case relates to broader data protection obligations, not specifically to cookie or consent banner compliance. It is not included in cookie statistics or the Risk Calculator.
VODAFONE SERVICIOS was fined after a customer discovered unauthorized charges due to a fraudulent contract. The company failed to verify the identity of the person who signed up for the service, which is a serious privacy issue.
What happened
VODAFONE SERVICIOS allowed fraudsters to create a mobile phone contract using a customer's personal information without proper checks.
Who was affected
The customer whose personal data was misused to create a fraudulent account.
What the authority found
The authority found that VODAFONE SERVICIOS did not verify the legality of the contract, violating GDPR rules.
Why this matters
This ruling underscores the importance of verifying customer identities to prevent fraud. It serves as a crucial lesson for all businesses to enhance their data protection measures.
GDPR Articles Cited
View original scraped data
Original data from scraper before AI verification against source document.
The Spanish DPA (AEPD) has imposed a fine on VODAFONE SERVICIOS, S.L.U.. A data subject filed a complaint with the DPA against the controller. The data subject is a client of the controller. When he checked his bills on the official website 'MY VODAFONE' last December, he found that he had four outstanding bills, but he could not access them. He had also received a number of requests to pay them. He was informed that there was a parallel account at Vodafone with details that partly corresponded to those of him. As it turned out, fraudsters had concluded a mobile phone contract using the personal data of the data subject. However, the personal data had been entered into the company's information systems without any verification that the contract was lawful and had actually been concluded by the data subject. The original fine of EUR 50,000 was reduced to EUR 40,000 due to voluntary payment.
Related Enforcement Actions (0)
No other enforcement actions found for VODAFONE SERVICIOS, S.L.U. in ES
This is the only recorded action for this entity in this jurisdiction.
Details
Fine Date
26 October 2021
Authority
Agencia Española de Protección de Datos
Fine Amount
€40,000
Enforcement Tracker ID
ETid-888
About this data
Cite as: Cookie Fines. VODAFONE SERVICIOS, S.L.U. - Spain (2021). Retrieved from cookiefines.eu
Last updated: