Sanction RGPD Spanish Data Protection Authority (aepd) — Vodafone España, S.A.U. : 120 k€ (2020)
- Autorité de contrôle
- Spanish Data Protection Authority (aepd)
- Pays
- Espagne
- Entreprise / secteur
- Vodafone España, S.A.U.
- Montant de l'amende
- 120 k€
- Date de la décision
- 27 février 2020
- Fondement juridique
- Art. 5, Art. 6
- Manquement
- Base légale insuffisante pour le traitement
Résumé des faits
Vodafone España was unable to prove to the data protection authority that the data subject had given his consent to the processing of his personal data for the provision of a telephone contract. Furthermore, the decision of the data protection authority emphasises that Vodafone España also unlawfully disclosed the personal data of the data subject to various credit agencies.