Enforcement
EN

Vodafone España, S.A.U.: Insufficient technical and organisational measures to ensure information security

€30,000 fine - Spanish Data Protection Authority (aepd)

€30,000 Fine
Vodafone España, S.A.U.
SPAIN
Insufficient technical and organisational measures to ensure information security
Jan 1, 2019 Source

Content

Disclosure of customer personal data (i.a. purchase history) via an SMS to another customer. The initial fine of EUR 50.000 was reduced to EUR 30.000.

GDPR Articles: Art. 5 (1) f) GDPR, Art. 32 GDPR
Industry: Media, Telecoms and Broadcasting