Vodafone España, S.A.U.
€60,000
Insufficient legal basis for data processing
Fecha de la decisión
6 de noviembre de 2019
Autoridad
Spanish Data Protection Authority (aepd)
ES
Sector
Media, Telecoms and Broadcasting
País
ES
Ley
GDPREstado
FINALDescripción
Vodafone has sent the customer's invoice data to unauthorised third parties following a customer invoice complaint. Originally, a fine of EUR 75,000 was threatened, but was reduced to EUR 60,000 against immediate payment and waiver of appeal.
Citas legales
Art. 6
Problemas e infracciones
Insufficient legal basis for data processing