Vodafone España, S.A.U.

€27,000

Insufficient fulfilment of data subjects rights

Decision Date

Not Available

Authority

Spanish Data Protection Authority (aepd)

ES

Sector

Media, Telecoms and Broadcasting

Country

ES

Law

GDPR

Status

FINAL

Description

Although the complainant (a former Vodafone customer) had requested Vodafone to delete his data in 2015 and this request had been confirmed by the company, he received more than 200 SMS from the company from 2018 onwards. Following Vodafone's statement, this happened because the complainant's mobile phone number was erroneously used for testing purposes and accidentally appeared in various customer files belonging to other customers than the complainant. Since the company agreed to both payment and admission of responsibility the fine was reduced in accordance with Spanish administrative law to EUR 27k.

Legal Citations

Art. 5 (1)

Issues & Violations

Insufficient fulfilment of data subjects rights

Stay Updated on Privacy Enforcement

We respect your privacy. One email per month, no spam, unsubscribe anytime.