VODAFONE ESPAÑA, S.A.U. – €400,000 Fine (Spain, 2026)

€400,000Agencia Española de Protección de Datos11 September 2026Spain
unknown
Fine

General GDPR enforcement action

This case relates to broader data protection obligations, not specifically to cookie or consent banner compliance. It is not included in cookie statistics or the Risk Calculator.

Insufficient technical and organisational measures to ensure information security

GDPR Articles Cited
Art. 28(GDPR)
Art. 32(GDPR)

Source checks

Source retrieval not recorded.

No automated check recorded.

Retrieved text may be a secondary summary or an announcement. These automated statuses do not establish that the original decision was read or that the record received an independent legal review. How we check sources

Spain enforcementAgencia Española de Protección de Datos actionsAll VODAFONE ESPAÑA, S.A.U. actions
Full Legal Summary

Insufficient technical and organisational measures to ensure information security

Related Enforcement Actions (12)

Other enforcement actions involving VODAFONE ESPAÑA, S.A.U. in ES

Fine
May 2021· Agencia Española de Protección de Datos

A data subject filed a complaint with the Spanish DPA (AEPD) stating that he had received more than 250 unsolicited commercial calls from Vodafone aft...

€50K
Fine
May 2021· Agencia Española de Protección de Datos

The Spanish DPA (AEPD) launched an investigation on Vodafone, following a complaint lodged by a data subject. The AEPD then started a sanctioning proc...

€5K
Fine
Jan 2022· Agencia Española de Protección de Datos

The Spanish DPA (AEPD) imposed a fine on VODAFONE ESPAÑA, S.A.U. due to insufficient legal basis for data processing. The data subject states that two...

€56K
Fine
Sept 2023· Agencia Española de Protección de Datos

On 21 August 2021 the data subject filed a complaint against Vodafone España, S.A.U., the controller, for violating their right of access. The data su...

€56K
Fine
Nov 2023· Agencia Española de Protección de Datos

The Spanish data protection authority has imposed a fine of EUR 50,000 on VODAFONE ESPAÑA, S.A.U.. A customer had filed a complaint with the DPA regar...

€56K
Fine
Feb 2024· Agencia Española de Protección de Datos

The Spanish DPA imposed a fine of EUR 100,000 on VODAFONE ESPAÑA, S.A.U. for insufficient legal basis for data processing. The data subject had filed ...

€100K
Fine
Apr 2024· Agencia Española de Protección de Datos

The Spanish DPA has imposed a fine on VODAFONE ESPAÑA, S.A.U.. A person had lodged a complaint with the DPA because they had received their telephone ...

€112K
Fine
Oct 2024· Agencia Española de Protección de Datos

The Spanish DPA has imposed a fine of EUR 200,000 on Vodafone España, S.A.U.. An individual had filed a complaint with the DPA because the company had...

€200K
Fine
Nov 2024· Agencia Española de Protección de Datos

The Spanish DPA has imposed a fine of EUR 200,000 on Vodafone España, S.A.U.. An individua had filed a complaint with the DPA because the company had ...

€200K
Fine
Aug 2026· Agencia Española de Protección de Datos

Insufficient technical and organisational measures to ensure information security

€750K
Fine
Sept 2026· Agencia Española de Protección de Datos

Insufficient technical and organisational measures to ensure information security

€500K
Current
Sept 2026

Fine

€400K

Fine
Sept 2026· Agencia Española de Protección de Datos

Insufficient technical and organisational measures to ensure information security

€400K

Details

Fine Date

11 September 2026

Authority

Agencia Española de Protección de Datos

Fine Amount

€400,000

Enforcement Tracker ID

3327

Sources

About this data

Data: CMS GDPR Enforcement Tracker
Licensed under CC BY-NC-SA 4.0
Automatically normalized and classified

Cite as: Cookie Fines. VODAFONE ESPAÑA, S.A.U. - Spain (2026). Retrieved from cookiefines.eu

Report Inaccuracy

Last updated: