Spanish DPA fines Vodafone €8.15M for data protection violations

According to DataGuidance, the Spanish data protection authority (‘AEPD’) has announced its decision to fine Vodafone Spain €8.15 million for carrying out marketing and commercial prospecting actions through telephone calls and by sending electronic commercial communications through emails and SMS messages. Compliance Week reports that the penalty is the highest the AEPD has so far handed out, and is the sum of four fines, two of which—totalling €6 million—relate to violations of the EU’s General Data Protection Regulation (GDPR).