Spain: Sanctions process against Vodafone for GDPR violations concluded with fine by AEPD

On 13 October 2021, the Agencia Española de Protección de Datos (AEPD), the Spanish data protection regulator, has concluded its sanctions process against Vodafone. The AEPD found that Vodafone had violated Art.5.1(f) and Art.32, on processing security, of the GDPR, issuing a fine of 50,000 euros.