Vodafone – €44,000 Fine (Spain, 2019)
General GDPR enforcement action
This case relates to broader data protection obligations, not specifically to cookie or consent banner compliance. It is not included in cookie statistics or the Risk Calculator.
Vodafone was fined €44,000 by the Spanish Data Protection Authority for sending a customer's personal data to the wrong person. The mistake was due to an employee error, but the authority ruled that Vodafone failed to protect the data properly. This case highlights the importance of ensuring data security even when mistakes happen.
What happened
Vodafone mistakenly sent personal data to a third party due to an employee error.
Who was affected
A Vodafone customer whose personal data was sent to the wrong person.
What the authority found
The authority ruled that Vodafone failed to ensure appropriate security for personal data, violating GDPR.
Why this matters
This ruling emphasizes that companies must have strong data security measures, even if a mistake is made in good faith. It serves as a reminder to train employees on data protection.
GDPR Articles Cited
A third-party received several documents related to a contract with Vodaphone, containing the complainant's personal data. Thus, the complainant filed a complaint with the AEPD. Vodaphone claimed that a mistake has been made by on of its employee in good faith. Can a mistake made in good faith justify the sharing of personal data to a third-party? Although Vodaphone insisted on the fact that a mistake has been made by an employee, the AEPD held that personal data was processed in a manner which does no ensure appropriate security. As a consequence, Vodaphone violated Article 5(1)(f) GDPR, as interpreted in the light of the last sentence of the recital 39 GDPR.
Related Enforcement Actions (0)
No other enforcement actions found for Vodafone in ES
This is the only recorded action for this entity in this jurisdiction.
Details
Fine Date
26 December 2019
Authority
Agencia Española de Protección de Datos
Fine Amount
€44,000
GDPRhub ID
gdprhub-211About this data
Cite as: Cookie Fines. Vodafone - Spain (2019). Retrieved from cookiefines.eu
Last updated: