Vodafone España, S.A.U.

€120,000

Insufficient legal basis for data processing

Decision Date

February 27, 2020

Authority

Spanish Data Protection Authority (aepd)

ES

Sector

Media, Telecoms and Broadcasting

Country

ES

Law

GDPR

Status

FINAL

Description

Vodafone España was unable to prove to the data protection authority that the data subject had given his consent to the processing of his personal data for the provision of a telephone contract. Furthermore, the decision of the data protection authority emphasises that Vodafone España also unlawfully disclosed the personal data of the data subject to various credit agencies.

Legal Citations

Art. 5Art. 6

Issues & Violations

Insufficient legal basis for data processing

Stay Updated on Privacy Enforcement

We respect your privacy. One email per month, no spam, unsubscribe anytime.