Vodafone España, SAU – €40,000 Fine (Spain, 2021)

€40,000Agencia Española de Protección de Datos15 November 2021Spain
reduced
Fine

General GDPR enforcement action

This case relates to broader data protection obligations, not specifically to cookie or consent banner compliance. It is not included in cookie statistics or the Risk Calculator.

Vodafone España mistakenly sent debt-related text messages to a person due to a system error. The messages contained outdated billing information linked to the person's former partner. The Spanish DPA fined Vodafone EUR 40,000 for processing data without a valid legal basis.

What happened

Vodafone España sent incorrect debt-related messages to a person because of a system error linking them to an old account.

Who was affected

A person who received text messages about debts linked to their former partner's account.

What the authority found

The Spanish DPA determined that Vodafone processed personal data without a valid legal basis, violating GDPR requirements.

Why this matters

This case underscores the need for companies to ensure their systems accurately process data and maintain up-to-date records. It also emphasizes the importance of having a valid legal basis for data processing.

GDPR Articles Cited

Art. 6(1) GDPR
Spain enforcementAgencia Española de Protección de Datos actionsAll Vodafone España, SAU actions
Full Legal Summary
Detailed

The Spanish DPA (AEPD) has imposed a fine on Vodafone España SAU. An individual had filed a complaint with the DPA. The data subject claims to have received text messages from Vodafone in September 2020 informing him that he had debts from services he had ordered from Vodafone. The billing address listed in the text messages corresponded to that of an old house where the data subject had lived with his ex-partner in the past. Vodafone stated that a system error had led to this incident. This resulted in the data subject appearing as the holder of his former partner's customer account. The original fine of EUR 50,000 was reduced to EUR 40,000 due to voluntary payment.

Related Enforcement Actions (5)

Other enforcement actions involving Vodafone España, SAU in ES

Fine
Jul 2020· Agencia Española de Protección de Datos

Fines for violation of Art. 5 (1) d) GDPR for changing the customer's master data into the name of a third party, the ex-spouse of the customer.

€12K
Fine
Sept 2020· Agencia Española de Protección de Datos

A former customer had received e-mails containing electronic bills even after he had terminated his contract with the company resulting in a processin...

€60K
Fine
Feb 2021· Agencia Española de Protección de Datos

The Spanish DPA (AEPD) imposed a fine of EUR 200,000 on Vodafone España, S.A.U. A former customer had received e-mails containing electronic bills eve...

€120K
Fine
May 2021· Agencia Española de Protección de Datos

The Spanish DPA (AEPD) has imposed a fine of EUR 100,000 on Vodafone España, S.A.U.. A data subject had filed a complaint with the Spanish DPA against...

€100K
Fine
Nov 2021· Agencia Española de Protección de Datos

The Spanish DPA (AEPD) has imposed a fine on Vodafone España SAU. A data subject had filed a complaint with the AEPD against the data controller. The ...

€30K
Current
Nov 2021

Fine

€40K

Details

Fine Date

15 November 2021

Authority

Agencia Española de Protección de Datos

Fine Amount

€40,000

Enforcement Tracker ID

ETid-908

Sources

About this data

Data: CMS GDPR Enforcement Tracker
Licensed under CC BY-NC-SA 4.0
AI-verified and classified

Cite as: Cookie Fines. Vodafone España, SAU - Spain (2021). Retrieved from cookiefines.eu

Report Inaccuracy

Last updated: