Vodafone România SA – €2,900 Fine (Romania, 2021)
General GDPR enforcement action
This case relates to broader data protection obligations, not specifically to cookie or consent banner compliance. It is not included in cookie statistics or the Risk Calculator.
Romania fined Vodafone EUR 2,900 for not securing customer data, leading to unauthorized access. This is important because it emphasizes the need for strong data protection measures. Companies should regularly update their security protocols to prevent data breaches.
What happened
Vodafone România SA experienced unauthorized access to customer data due to inadequate security measures.
Who was affected
Seventy Vodafone customers whose personal data was accessed without authorization.
What the authority found
The Romanian authority found Vodafone did not implement adequate technical and organizational measures to secure personal data, violating GDPR's security requirements.
Why this matters
This case serves as a reminder for businesses to prioritize data security and regularly assess their measures to protect customer information. It highlights the growing expectation for companies to safeguard personal data against unauthorized access.
GDPR Articles Cited
The Romanian DPA (ANSPDCP) has imposed a fine of EUR 2,900 on VODAFONE România S.A.. The company had reported a data breach to the DPA in accordance with Art. 33 GDPR. In the period from November 2020 to June 2021, there had been unauthorized access to personal data of seventy data subjects (mailing of service contracts to wrong email addresses, unauthorized access by employees of the controller to personal data of Vodafone customers without their request). The DPA found that the controller did not take appropriate technical and organizational measures to ensure the security of the processing of personal data.
Related Enforcement Actions (2)
Other enforcement actions involving Vodafone România SA in RO
Fine
€3K
Details
Fine Date
14 November 2021
Authority
Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal
Fine Amount
€2,900
Enforcement Tracker ID
ETid-898
About this data
Cite as: Cookie Fines. Vodafone România SA - Romania (2021). Retrieved from cookiefines.eu
Last updated: