Vodafone España, S.A.U.
€30,000
Insufficient technical and organisational measures to ensure information security
Data della decisione
1 gennaio 2019
Autorità
Spanish Data Protection Authority (aepd)
ES
Settore
Media, Telecoms and Broadcasting
Paese
ES
Legge
GDPRStato
FINALDescrizione
Disclosure of customer personal data (i.a. purchase history) via an SMS to another customer. The initial fine of EUR 50.000 was reduced to EUR 30.000.
Citazioni legali
Art. 5 (1)Art. 32
Problemi e violazioni
Insufficient technical and organisational measures to ensure information security