Vodafone España, S.A.U. – €42,000 Fine (Spain, 2022)

€42,000Agencia Española de Protección de Datos17 May 2022Spain
reduced
Fine

General GDPR enforcement action

This case relates to broader data protection obligations, not specifically to cookie or consent banner compliance. It is not included in cookie statistics or the Risk Calculator.

Vodafone España was fined EUR 42,000 for continuing to send invoices to a customer after their contract ended. This case shows that companies must stop processing personal data when there's no valid reason to continue.

What happened

Vodafone España continued to send invoices to a customer even after their contract had ended and they had objected.

Who was affected

Former customers who received invoices despite having no ongoing contract with Vodafone España.

What the authority found

The authority decided that Vodafone España processed personal data without a valid reason, violating GDPR rules.

Why this matters

This case warns companies to ensure they have a valid reason to process personal data, especially when a customer relationship ends. It emphasizes the need for clear data management practices.

GDPR Articles Cited

Art. 6(1) GDPR
Full Legal Summary
Detailed

The Spanish DPA (AEPD) has imposed a fine on Vodafone España S.A.U.. A data subjects had filed a complaint with the AEPD against the controller. The data subject complained about receiving invoices even though there was no longer a contractual relationship between them and the controller. However, although the data subject had objected to the continued receipt of messages as there were no more invoices outstanding and the controller had confirmed this, the sending continued. The DPA therefore found, that the controller processed the data subejct's data without a valid legal basis. The original fine of EUR 70,000 was reduced to EUR 42,000 due to immediate payment and admission of guilt.

Related Enforcement Actions (20)

Other enforcement actions involving Vodafone España, S.A.U. in ES

Current
May 2022

Fine

€42K

Details

Fine Date

17 May 2022

Authority

Agencia Española de Protección de Datos

Fine Amount

€42,000

Enforcement Tracker ID

ETid-1179

About this data

Data: CMS GDPR Enforcement Tracker
Licensed under CC BY-NC-SA 4.0
AI-verified and classified

Cite as: Cookie Fines. Vodafone España, S.A.U. - Spain (2022). Retrieved from cookiefines.eu

Report Inaccuracy

Last updated: