VODAFONE ONO, S.A.U.
€48,000
Insufficient technical and organisational measures to ensure information security
Decision Date
January 1, 2019
Authority
Spanish Data Protection Authority (aepd)
ES
Sector
Media, Telecoms and Broadcasting
Country
ES
Law
GDPRStatus
FINALDescription
Customers could access personal data of other customers in the customer area. The initial fine of EUR 60.000 was reduced to EUR 48.000.
Legal Citations
Art. 32
Issues & Violations
Insufficient technical and organisational measures to ensure information security