Spain: AEPD sanctions process against Vodafone for GDPR violations
Progress
Current status
concluded
13 Oct 2021 in force
24 Jun 2021 under deliberation
Scope
Implementers
Spain
Policy Area
Data governance
Policy Instrument
Data protection regulation
Regulated Economic Activity
infrastructure provider: internet and telecom services
Government Branch
executive
Government Body
data protection authority
Implementation Level
national
Timeline of events
Sanctions process against Vodafone for GDPR violations concluded with fine by AEPD
On 13 October 2021, the Agencia Española de Protección de Datos (AEPD), the Spanish data protection regulator, has concluded its sanctions process against Vodafone. The AEPD found that Vodafone had violated Art.5.1(f) and Art.32, on processing secur…
SourceEvent type
investigation
Action type
ruling
Government branch
executive
Government body
data protection authority
Sanctions process against Vodafone for GDPR violations initiated by AEPD
The Agencia Española de Protección de Datos (AEPD), the Spanish data protection regulator, has initiated a sanctions process against Vodafone based on alleged sharing of third-party invoices with users.
SourceEvent type
investigation
Action type
announcement
Government branch
executive
Government body
data protection authority