Vodafone España, S.A.U. – €60,000 Fine (Spain, 2021)

€60,000Agencia Española de Protección de Datos16 March 2021Spain
reduced
Fine

General GDPR enforcement action

This case relates to broader data protection obligations, not specifically to cookie or consent banner compliance. It is not included in cookie statistics or the Risk Calculator.

Vodafone Spain was fined €60,000 for repeatedly sending payment reminders to a former customer for services she never booked. Despite assurances to fix the issue, the messages continued, leading to multiple complaints. This case shows the importance of respecting customer data and promptly addressing errors.

What happened

Vodafone Spain sent repeated payment reminders to a former customer for services she never booked.

Who was affected

A former customer of Vodafone Spain who received incorrect payment reminders was affected.

What the authority found

The Spanish DPA fined Vodafone Spain €60,000 for lacking a valid legal basis to process the customer's data, violating GDPR.

Why this matters

This case underscores the importance of data accuracy and the need for companies to quickly resolve data processing errors. It highlights the financial risks of non-compliance with GDPR.

GDPR Articles Cited

Art. 6(1) GDPR
Full Legal Summary
Detailed

The Spanish DPA (AEPD) imposed a fine of EUR 60,000 on Vodafone Spain. The data subject had been a customer of the controller several years ago. After receiving payment reminders from the controller via SMS for services she had never booked, she informed the controller and asked for clarification and deletion of her data. Despite a positive response, she continued to receive the same SMS. The data subject then filed two complaints with the Spanish DPA against Vodafone Spain. Both times, the controller had assured that it had corrected the reason for the incorrect sending and deleted the data of the data subject. Nevertheless, the mailing continued, leading the data subject to file a third complaint. The original fine of EUR 100,000 was reduced to EUR 60,000 due to immediate payment and admission of guilt.

Related Enforcement Actions (20)

Other enforcement actions involving Vodafone España, S.A.U. in ES

Current
Mar 2021

Fine

€60K

Details

Fine Date

16 March 2021

Authority

Agencia Española de Protección de Datos

Fine Amount

€60,000

Enforcement Tracker ID

ETid-605

About this data

Data: CMS GDPR Enforcement Tracker
Licensed under CC BY-NC-SA 4.0
AI-verified and classified

Cite as: Cookie Fines. Vodafone España, S.A.U. - Spain (2021). Retrieved from cookiefines.eu

Report Inaccuracy

Last updated: