Vodafone España, S.A.U.
€42,000
Insufficient technical and organisational measures to ensure information security
Decision Date
March 3, 2020
Authority
Spanish Data Protection Authority (aepd)
ES
Sector
Media, Telecoms and Broadcasting
Country
ES
Law
GDPRStatus
FINALDescription
According to the AEPD, the company had not been able to demonstrate adequate measures to ensure information security, leading to unauthorized access to personal data of a client.
Legal Citations
Art. 5 (1)Art. 32
Issues & Violations
Insufficient technical and organisational measures to ensure information security