Vodafone România SA – €2,900 Fine (Romania, 2021)
General GDPR enforcement action
This case relates to broader data protection obligations, not specifically to cookie or consent banner compliance. It is not included in cookie statistics or the Risk Calculator.
Romania fined Vodafone EUR 2,900 for not securing customer data, leading to unauthorized access. This is important because it emphasizes the need for strong data protection measures. Companies should regularly update their security protocols to prevent data breaches.
What happened
Vodafone România SA experienced unauthorized access to customer data due to inadequate security measures.
Who was affected
Seventy Vodafone customers whose personal data was accessed without authorization.
What the authority found
The Romanian authority found Vodafone did not implement adequate technical and organizational measures to secure personal data, violating GDPR's security requirements.
Why this matters
This case serves as a reminder for businesses to prioritize data security and regularly assess their measures to protect customer information. It highlights the growing expectation for companies to safeguard personal data against unauthorized access.
View original scraped data
Original imported citations before automated processing; the processing history does not establish independent verification.
Source checks
Linked-source text retrieved.
Review needed — 15 March 2026.
Processing notes: articles corrected, amount discrepancy, national law identified.
Retrieved text may be a secondary summary or an announcement. These automated statuses do not establish that the original decision was read or that the record received an independent legal review. How we check sources
The Romanian DPA (ANSPDCP) has imposed a fine of EUR 2,900 on VODAFONE România S.A.. The company had reported a data breach to the DPA in accordance with Art. 33 GDPR. In the period from November 2020 to June 2021, there had been unauthorized access to personal data of seventy data subjects (mailing of service contracts to wrong email addresses, unauthorized access by employees of the controller to personal data of Vodafone customers without their request). The DPA found that the controller did not take appropriate technical and organizational measures to ensure the security of the processing of personal data.
Related Enforcement Actions (2)
Other enforcement actions involving Vodafone România SA in RO
Fine
€3K
Details
Fine Date
14 November 2021
Authority
Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal
Fine Amount
€2,900
About this data
Cite as: Cookie Fines. Vodafone România SA - Romania (2021). Retrieved from cookiefines.eu
Last updated: