GDPR Fines

A public record of GDPR enforcement across Europe — compiled by INPLP members

VODAFONE ESPAÑA, S.A.U.,

Country
Spain
Fine
40 EUR
Date
2019-06-03
Sector
Private Sector
Articles
Art. 6 GDPR

Insufficient legal basis for data processing

The Spanish DPA imposed a fine on a mobile telephone company for the processing of personal data in order to charge the applicant for a Netflix service which it had not used. However, according to the Spanish data protection authority, the company did not exercise the minimum level of care to verify the identity of the data subject. Authority: Spanish DPA (Agencia Española de Protección de Datos - AEPD)

Source: https://www.aepd.es/es/documento/ps-00064-2019.pdf

Reported by: Andersen Tax & Legal