18 August 2020
The Spanish Data Protection Authority (AEPD) imposed a fine of 75.000 EUR on VODAFONE ESPAÑA for processing the claimant’s telephone number for marketing purposes after they had exercised their right to erasure in 2015, in spite of what the data subject was sent advertising SMS. The controller stated that the claimant number, being easy to remember, had been used as a “dummy number” by its employees.
The AEPD considered that VODAFONE ESPAÑA violated Article 6(1) of the GDPR, by processing the claimant's personal data without any lawful basis.
You can read the text of the decision in Spanish here.
For further information, please contact the Spanish DPA: prensa@aepd.es
The press release published here does not constitute official EDPB communication, nor an EDPB endorsement. This press release was originally published by the national supervisory authority and was published here at the request of the SA for information purposes. As the press release is represented here as it appeared on the SA's website or other channels of communication, the news item is only available in English or in the Member State's official language with a short introduction in English. Any questions regarding this press release should be directed to the supervisory authority concerned.