Spanish DPA Fines Vodafone Spain more than 8 Million Euros

Mar 30, 2021

Source: European Data Protection Board

Vodafone Spain fined more than 8 million euros for the RGPD and two infractions of national laws

Case summary:  From April 2018 to September 2019, 191 complaints were received for similar cases concerning telephone calls and SMS messages to citizens who had opposed the processing of their data for advertising. In September 2019, a face-to-face inspection was carried out at the headquarters of “Vodafone España, S.A.U.” detecting the absence of continuous monitoring to processor and the lack of organizational and technical means to carry out the commission by the entrusted treatments (art. 28), especially on the ability to avoid advertising actions to those citizens who had exercised their rights of opposition or erasure of their personal data. An international data transfer (Article 44) to third country (Republic of Peru) was also detected from where the processors carried out advertising actions on behalf of the entity responsible for the processing (Vodafone España, S.A.,U.).

It should be added that the supervisory authority, based on its national competences, sanctioned two other penalties relating to two related national laws (General Telecommunications Law and Electronic Commerce Law) with fines of 2,000,000 € and 150,000 €, respectively.

For further information, please contact the Spanish DPA: prensa@aepd.es

The press release published here does not constitute official EDPB communication, nor an EDPB endorsement. This press release was originally published by the national supervisory authority and was published here at the request of the SA for information purposes. As the press release is represented here as it appeared on the SA’s website or other channels of communication, the news item is only available in English or in the Member State’s official language with a short introduction in English. Any questions regarding this press release should be directed to the supervisory authority concerned.

Recent news

EDPB calls for coherence of digital legislation with the GDPR

Brussels, 04 December - During its December 2024 plenary, the European Data Protection Board (EDPB) adopted a statement on the second report of the European Commission on the application of the General Data Protection Regulation (GDPR).* In its statement, the EDPB...

read more

EDPB stakeholder event AI models

The EDPB is holding a stakeholder event on “AI models” with participants representing European sector associations, organisations, NGOs, individual companies, law firms and academics.    During today’s event, the EDPB will collect input for of the preparation of a...

read more