FineME
Back to Cases
technologytelecoms · 2021

Vodafone España S.A.U.

The AEPD fined Vodafone España €8.15 million for multiple GDPR violations including unlawful processing of personal data for commercial communications without consent, obstructing customer requests to exercise data protection rights, and inadequate data security measures.

Fine Imposed€8.2M
Authority

AEPD

Regulation

Key Takeaways
  • Telecoms operators must obtain valid consent for marketing and must not obstruct rights-exercise requests.