Vodafone España, S.A.U.
€30,000
Insufficient technical and organisational measures to ensure information security
Datum för beslut
1 januari 2019
Myndighet
Spanish Data Protection Authority (aepd)
ES
Sektor
Media, Telecoms and Broadcasting
Land
ES
Lag
GDPRStatus
FINALBeskrivning
Disclosure of customer personal data (i.a. purchase history) via an SMS to another customer. The initial fine of EUR 50.000 was reduced to EUR 30.000.
Rättsliga hänvisningar
Art. 5 (1)Art. 32
Frågor och överträdelser
Insufficient technical and organisational measures to ensure information security