VODAFONE ONO, S.A.U. – €56,000 Fine (Spain, 2023)
General GDPR enforcement action
This case relates to broader data protection obligations, not specifically to cookie or consent banner compliance. It is not included in cookie statistics or the Risk Calculator.
Vodafone Ono was fined €56,000 by the Spanish data protection authority for running a credit check on someone without a valid reason. This matters because businesses must have a legal basis before accessing personal data. The fine was reduced from €70,000 because Vodafone Ono paid it voluntarily.
What happened
Vodafone Ono conducted a credit check on an individual without having a customer relationship or other valid reason.
Who was affected
The person whose credit information was checked without a valid reason.
What the authority found
The Spanish data protection authority found that Vodafone Ono processed personal data without a legal basis, violating GDPR Article 6(1).
Why this matters
This case highlights the importance of having a valid legal basis before accessing personal data. Businesses should ensure they have proper consent or another legal reason to process personal information to avoid fines.
GDPR Articles Cited
The Spanish DPA has imposed a fine on VODAFONE ONO, S.A.U.. The controller had carried out a credit check on an individual without there being a customer relationship or other affiliation. The personal data of the data subject was thus processed without a legal basis.The original fine of EUR 70,000 was reduced to EUR 56,000 for voluntary payment.
Related Enforcement Actions (2)
Other enforcement actions involving VODAFONE ONO, S.A.U. in ES
Fine
€56K
Details
Fine Date
6 June 2023
Authority
Agencia Española de Protección de Datos
Fine Amount
€56,000
Enforcement Tracker ID
ETid-1860
About this data
Cite as: Cookie Fines. VODAFONE ONO, S.A.U. - Spain (2023). Retrieved from cookiefines.eu
Last updated: