GDPR Fines

A public record of GDPR enforcement across Europe — compiled by INPLP members

VODAFONE ESPANA, S.A.U.

Country
Spain
Fine
27,000 EUR
Date
Unknown(Unknown)
Sector
Private Sector
Articles
Art. 5 (1) d) GDPR

Insufficient fulfilment of data subjects rights

Although the complainant (a former Vodafone customer) had requested Vodafone to erase his data in 2015 and this request was approved by the company, he continued to receive more than 200 SMS from the company from 2018 onwards. Vodafone stated that this happened because the complainant's mobile phone number was mistakenly used for testing purposes and inadvertently appeared in various customer files of customers other than the complainant. As the company agreed to both the payment and the admission of responsibility, the fine was reduced to EUR 27 thousand in accordance with Spanish administrative law. Authority: Spanish Data Protection Authority (aepd)

Source: https://www.aepd.es/es/documento/ps-00401-2018.pdf

Reported by: Andersen Tax & Legal