- Enforcing jurisdiction
- Spain · Geography does not establish applicable law.
- Confirmed applicable legislation
- Privacy topics
Vodafone España, SAU – €120,000 Fine (Spain, 2021)
Privacy enforcement record
This record is classified outside cookie consent. Subject classification does not confirm an applicable law. It is not included in cookie statistics or the Risk Calculator.
Vodafone España was fined for sending bills to a former customer who had already canceled their contract. The Spanish data protection authority found that Vodafone continued to process this person's data without a valid reason. This case serves as a reminder for companies to stop using customer data once a contract is terminated.
What happened
Vodafone sent electronic bills to a former customer after the contract was canceled.
Who was affected
A former customer of Vodafone who received unwanted emails after canceling their service.
What the authority found
The authority determined that Vodafone processed personal data without sufficient legal basis, leading to a serious violation.
Why this matters
This case highlights the need for companies to respect customer requests to stop communications. Businesses should have clear processes to ensure they no longer use data from customers who have opted out.
View original scraped data
Original imported citations before automated processing; the processing history does not establish independent verification.
Source checks
Linked-source text retrieved.
Review needed — 6 March 2026.
Processing notes: articles corrected, amount discrepancy.
Retrieved text may be a secondary summary or an announcement. These automated statuses do not establish that the original decision was read or that the record received an independent legal review. How we check sources
The Spanish DPA (AEPD) imposed a fine of EUR 200,000 on Vodafone España, S.A.U. A former customer had received e-mails containing electronic bills even after he had terminated his contract with the controller resulting in a processing of personal data without sufficient legal basis. The data subject states that he still receives e-mails from the controller, although he has already objected to this several times and the controller has already received a fine twice for exactly these facts. The fine imposed this time is this high because the infringement was classified as very serious by the Spanish DPA. Among other things, because this was already the third violation in this matter. The original fine of EUR 200,000 was reduced for both immediate payment and admission of responsibility to EUR 120,000.
Related Enforcement Actions (6)
Other enforcement actions involving Vodafone España, SAU in ES
Fine
€120K
Details
Fine Date
12 February 2021
Authority
Agencia Española de Protección de Datos
Fine Amount
€120,000
About this data
Cite as: Cookie Fines. Vodafone España, SAU - Spain (2021). Retrieved from cookiefines.eu
Last updated: