VODAFONE ESPAÑA, S.A.U. – €50,000 Fine (Spain, 2021)

€50,000Agencia Española de Protección de Datos18 May 2021Spain
final
ePrivacy
Fine

Vodafone España sent invoices with personal information to the wrong address, violating privacy rules. This matters because it shows how important it is for companies to protect personal data and ensure it goes to the right people. The fine of €50,000 highlights the consequences of not following these rules.

What happened

Vodafone España sent invoices containing personal data to a neighbor instead of the intended recipient.

Who was affected

The person whose personal data was included in the invoices was affected.

What the authority found

The Spanish data protection authority ruled that Vodafone España violated privacy rules by mishandling personal data.

Why this matters

This case emphasizes the need for companies to handle personal data carefully and highlights the potential financial penalties for mistakes. Businesses should review their data handling practices to avoid similar issues.

GDPR Articles Cited

Art. 21 GDPR

National Law Articles

Article 48(1)(b) General Telecommunications Act
Full Legal Summary
Detailed

The fine was preceded by a complaint from a data subject who argued that Vodafone España had sent invoices containing his personal data, such as name, identity card and address, to its neighbour.

Violations (1)

Cookies Placed Before Consent
critical

Non-essential cookies (tracking, advertising) are placed on the user's device before obtaining valid consent.

Art. 6(1) GDPR

Details

Fine Date

18 May 2021

Authority

Agencia Española de Protección de Datos

Fine Amount

€50,000

Enforcement Tracker ID

ETid-195

GDPRhub ID

gdprhub-3525

About this data

Data: GDPRhub (noyb.eu)
Licensed under CC BY-NC-SA 4.0
AI-verified and classified

Cite as: Cookie Fines. VODAFONE ESPAÑA, S.A.U. - Spain (2021). Retrieved from cookiefines.eu

Report Inaccuracy

Last updated: