Vodafone España, S.A.U.
€30,000
Insufficient technical and organisational measures to ensure information security
Päätöspäivä
1. tammikuuta 2019
Viranomainen
Spanish Data Protection Authority (aepd)
ES
Ala
Media, Telecoms and Broadcasting
Maa
ES
Laki
GDPRTila
FINALKuvaus
Disclosure of customer personal data (i.a. purchase history) via an SMS to another customer. The initial fine of EUR 50.000 was reduced to EUR 30.000.
Oikeudelliset viittaukset
Art. 5 (1)Art. 32
Asiat ja rikkomukset
Insufficient technical and organisational measures to ensure information security