40,000 euro fine for Vodafone España S.A.U. for breach of the GDPR

The Spanish data protection authority (AEPD) has fined the operator for violating Article 6(1) of the GDPR. A change of subscriber took place without the consent of the data subject. The applicant’s account was debited with amounts resulting from bills issued to a third party. These bills were assigned to the wrong person as a result of an error.