Vodafone España, S.A.U.

€40,000

Insufficient legal basis for data processing

Дата принятия решения

19 октября 2021 г.

Авторитет

Spanish Data Protection Authority (aepd)

ES

Сектор

Media, Telecoms and Broadcasting

Страна

ES

Закон

GDPR

Статус

FINAL

Описание

The Spanish DPA (AEPD) has fined Vodafone España, S.A.U. EUR 40,000. An individual had filed a complaint with the DPA against Vodafone for debiting his bank account in May 2020 for a Vodafone telephone line whose owner was not him but his ex-partner. As it turned out, the complainant's ex-partner had concluded a contract with Vodafone in his name. She stated that she was authorized to do so, but did not provide any proof of this. The DPA found that Vodafone had unlawfully processed the complainant's data. Indeed, compliance with the principle of lawfulness in the processing of third party data requires that the controller is able to prove lawfulness.

Юридические цитаты

Art. 6 (1)

Проблемы и нарушения

Insufficient legal basis for data processing

Будьте в курсе событий, связанных с соблюдением конфиденциальности

Мы уважаем вашу конфиденциальность. Одно письмо в месяц, без спама, отказ от подписки в любое время.