Vodafone España, S.A.U.
€42,000
Insufficient technical and organisational measures to ensure information security
Decision Date
February 14, 2020
Authority
Spanish Data Protection Authority (aepd)
ES
Sector
Media, Telecoms and Broadcasting
Country
ES
Law
GDPRStatus
FINALDescription
The complainant had access to third party data in his personal Vodafone profile.
Legal Citations
Art. 5 (1)Art. 32
Issues & Violations
Insufficient technical and organisational measures to ensure information security