Vodafone España, S.A.U.
€30,000
Insufficient technical and organisational measures to ensure information security
Fecha de la decisión
1 de enero de 2019
Autoridad
Spanish Data Protection Authority (aepd)
ES
Sector
Media, Telecoms and Broadcasting
País
ES
Ley
GDPREstado
FINALDescripción
Disclosure of customer personal data (i.a. purchase history) via an SMS to another customer. The initial fine of EUR 50.000 was reduced to EUR 30.000.
Citas legales
Art. 5 (1)Art. 32
Problemas e infracciones
Insufficient technical and organisational measures to ensure information security