VODAFONE ONO, S.A.U.
€48,000
Insufficient technical and organisational measures to ensure information security
Decision Date
28 de fevereiro de 2020
Authority
Spanish Data Protection Authority (aepd)
ES
Sector
Media, Telecoms and Broadcasting
Country
ES
Law
GDPRStatus
FINALDescription
The decision was taken due to several deficiencies in information security. For example, two people were given the same security access key.
Legal Citations
Art. 32
Issues & Violations
Insufficient technical and organisational measures to ensure information security