AEPD publishes million-euro fines against Vodafone and Amadeus for data protection breaches
27 Jun 2026Effective: 27 Jun 2026365 views
Who is affected:
Companies processing personal data, especially large technology and telecommunications corporations
Summary
The Spanish Data Protection Authority sanctions Vodafone with 1.05 million and Amadeus with 14.4 million euros for violating the RGPD in the processing of personal data.
Detailed analysis
PRO
The AEPD publishes in the BOE, in accordance with article 76.4 of the LOPDGDD, sanctions exceeding one million euros imposed on legal entities. Vodafone España receives a total fine of 1,050,000 euros: two breaches of article 6.1 RGPD (lack of legal basis for processing) of 150,000 euros each, and one breach of article…
PRO exclusive content
Implicaciones prácticas, plazos y recomendaciones específicas para tu sector.
The official website for whistleblowers changes its address to proteccioninformante.sede.gob.es. The old address will continue to function temporarily to facili...
Citizens, companies and whistleblowers who use the AIPI's electronic office
Entities that own health data must describe their datasets with standardized metadata to facilitate secondary use in research and health policies in the EU.
Hospitals, insurers, laboratories, clinical registries and entities with electronic health data
The European Parliament approves how the European Data Protection Supervisor managed its budget in 2024. It is a democratic control procedure over the spending ...
EU institutions and bodies supervised by the EDPS; citizens and companies indirectly
The EU updates the rules for accessing, modifying and deleting data in the central ETIAS system for traveler control. It replaces the previous 2021 regulation.
EU border, police and immigration authorities; transport operators
