ODAFONE SERVICIOS, S.L.U. – €56,000 Fine (Spain, 2023)
General GDPR enforcement action
This case relates to broader data protection obligations, not specifically to cookie or consent banner compliance. It is not included in cookie statistics or the Risk Calculator.
Vodafone Servicios was fined for giving a duplicate SIM card to a fraudster without checking their identity. This is important because it shows that companies need to verify who they are sharing sensitive information with to protect their customers. The ruling serves as a reminder for businesses to strengthen their identity verification processes.
What happened
Vodafone Servicios provided a duplicate SIM card to an unauthorized third party without verifying their identity.
Who was affected
The person whose SIM card was duplicated and whose bank account was accessed by fraudsters.
What the authority found
The authority found that Vodafone Servicios failed to verify the identity of the third party or obtain consent, violating data protection rules.
Why this matters
This case highlights the need for companies to implement strong identity verification measures. It sets a standard for how businesses should handle sensitive customer information.
GDPR Articles Cited
The Spanish DPA has imposed a fine of EUR 70,000 on VODAFONE SERVICIOS, S.L.U.. A person had filed a complaint with the DPA because the company had given a duplicate of their SIM card to an unauthorized fraudulent third party without their consent. During its investigation, the DPA found that the company failed to verify the identity of the third party or obtain the data subject's consent to share their data. This allowed the fraudsters to gain access to the data subject's bank account and make unauthorized transactions.
Related Enforcement Actions (0)
No other enforcement actions found for ODAFONE SERVICIOS, S.L.U. in ES
This is the only recorded action for this entity in this jurisdiction.
Details
Fine Date
3 July 2023
Authority
Agencia Española de Protección de Datos
Fine Amount
€56,000
Enforcement Tracker ID
ETid-1941
About this data
Cite as: Cookie Fines. ODAFONE SERVICIOS, S.L.U. - Spain (2023). Retrieved from cookiefines.eu
Last updated: