Vodafone España, S.A.U.
€60,000
Insufficient legal basis for data processing
Decision Date
November 6, 2019
Authority
Spanish Data Protection Authority (aepd)
ES
Sector
Media, Telecoms and Broadcasting
Country
ES
Law
GDPRStatus
FINALDescription
Vodafone has sent the customer's invoice data to unauthorised third parties following a customer invoice complaint. Originally, a fine of EUR 75,000 was threatened, but was reduced to EUR 60,000 against immediate payment and waiver of appeal.
Legal Citations
Art. 6
Issues & Violations
Insufficient legal basis for data processing