Spain: Sanctions process against Vodafone for breaches of Arts 6, 17 of GDPR initiated by AEPD

On 12 July 2021, the Spanish Data Protection Authority (Agencia Española de Protección de Datos - AEPD) has announced that it has initiated a sanctions process against Vodafone España for alleged breaches of Art.6(1) (lawful processing) and Art.17(1) (right to the erasure of data) of the EU General Data Protection Regulation (GDPR).