VODAFONE SERVICIOS, S.L.U. – €40,000 Fine (Spain, 2021)
General GDPR enforcement action
This case relates to broader data protection obligations, not specifically to cookie or consent banner compliance. It is not included in cookie statistics or the Risk Calculator.
Vodafone was fined €40,000 by the Spanish data protection authority for not verifying a customer's identity before setting up a mobile contract. This led to fraudsters using the customer's personal data to create a fake account. The case highlights the importance of verifying customer information to prevent identity theft.
What happened
Vodafone allowed fraudsters to set up a mobile phone contract using a customer's personal data without verifying the identity.
Who was affected
A Vodafone customer whose personal data was used by fraudsters to create a fake mobile contract.
What the authority found
The Spanish authority fined Vodafone for not having a valid legal basis for processing personal data, as they failed to verify the customer's identity.
Why this matters
This case underscores the need for companies to implement strong identity verification processes to protect customers from fraud. It serves as a warning to businesses about the risks of inadequate data handling practices.
GDPR Articles Cited
The Spanish DPA (AEPD) has imposed a fine on VODAFONE SERVICIOS, S.L.U.. A data subject filed a complaint with the DPA against the controller. The data subject is a client of the controller. When he checked his bills on the official website 'MY VODAFONE' last December, he found that he had four outstanding bills, but he could not access them. He had also received a number of requests to pay them. He was informed that there was a parallel account at Vodafone with details that partly corresponded to those of him. As it turned out, fraudsters had concluded a mobile phone contract using the personal data of the data subject. However, the personal data had been entered into the company's information systems without any verification that the contract was lawful and had actually been concluded by the data subject. The original fine of EUR 50,000 was reduced to EUR 40,000 due to voluntary payment.
Related Enforcement Actions (1)
Other enforcement actions involving VODAFONE SERVICIOS, S.L.U. in ES
Details
Fine Date
26 October 2021
Authority
Agencia Española de Protección de Datos
Fine Amount
€40,000
Enforcement Tracker ID
ETid-888
About this data
Cite as: Cookie Fines. VODAFONE SERVICIOS, S.L.U. - Spain (2021). Retrieved from cookiefines.eu
Last updated: