Vodafone España, S.A.U. – €64,000 Fine (Spain, 2021)
General GDPR enforcement action
This case relates to broader data protection obligations, not specifically to cookie or consent banner compliance. It is not included in cookie statistics or the Risk Calculator.
Vodafone Spain was fined EUR 64,000 for processing personal data without a proper legal basis. Fraudsters used someone's personal data to open phone lines, and Vodafone didn't verify the contracts. This matters because it shows companies must verify data before processing it to avoid fraud.
What happened
Vodafone processed personal data for phone contracts without verifying if they were legitimate.
Who was affected
Individuals whose personal data was used fraudulently to open phone lines.
What the authority found
The Spanish data protection authority fined Vodafone for lacking a valid legal basis for processing personal data.
Why this matters
This case highlights the importance of verifying personal data to prevent fraud. Companies should ensure they have a valid legal basis for processing data to avoid similar fines.
GDPR Articles Cited
The Spanish DPA (AEPD) imposed a fine on Vodafone España, S.A.U. due to insufficient legal basis for data processing. The data subject had filed a complaint against the data controller. The data subject stated that telephone lines were registered in his name for which there were also outstanding payments. However, the data subject had never concluded contracts with the company for any of these lines. Rather, the contracts in question were concluded by fraudsters using the personal data of the data subject. Still, the personal data was entered into the company's information systems without any verification as to whether the contracts were lawful and actually concluded by the data subject. The original fine of EUR 80,000 was reduced to EUR 64,000 due to voluntary payment.
Related Enforcement Actions (20)
Other enforcement actions involving Vodafone España, S.A.U. in ES
Fine
€64K
Details
Fine Date
26 October 2021
Authority
Agencia Española de Protección de Datos
Fine Amount
€64,000
Enforcement Tracker ID
ETid-886
About this data
Cite as: Cookie Fines. Vodafone España, S.A.U. - Spain (2021). Retrieved from cookiefines.eu
Last updated: