VODAFONE ESPAÑA, S.A.U.

What happened

The DPA fined VODAFONE €56,000 for sharing confidential data of another customer while addressing a different customer's right of access. The controller benefitted from a €14,000 reduction in the original fine as they renounced to any form of appeal against the sanction

Summary from GDPRhub (noyb), written by its volunteers, not by Fino. CC BY-NC-SA 4.0.

Rules involved

• Art. 4Definitions4(12)Read →
• Art. 5Principles relating to processing of personal data5(1)(f)Read →
• Art. 32Security of processingRead →
• Art. 33Notification of a personal data breach to the supervisory authorityRead →
• Art. 34Communication of a personal data breach to the data subjectRead →
• Art. 83General conditions for imposing administrative fines83(4) · 83(5)Read →

• Data breach
• Data principles
• Data security