Vodafone España, S.A.U.: Insufficient legal basis for data processing

€40,000 fine - Spanish Data Protection Authority (aepd)

€40,000 Fine

Vodafone España, S.A.U.

SPAIN

Insufficient legal basis for data processing

Mar 3, 2020 Source

Content

According to the AEPD, the company sent an SMS to an clients mobile number confirming that a telephone contract with that number had been signed even though the client was not a Vodafone client, resulting in the processing of personal data without the data subjects consent or other legitimate interests of the company.

GDPR Articles: Art. 5 GDPR, Art. 6 GDPR
Industry: Media, Telecoms and Broadcasting