Administrative fines in the total amount of €45.000.000 imposed on Vodafone by German Supervisory Authority for Data Protection

The German Federal Supervisory Authority for Data Protection imposed a fine of €15 000 000 for insufficient supervision and auditing procedures regarding the partner agencies and imposed a reprimand for the weaknesses in the IT systems. Furthermore, it imposed a fine of €30 000 000 for insufficient security measures regarding the online service portal.

The German Federal Supervisory Authority (SA) launched investigations regarding Vodafone GmbH’s partner agencies and its online service portal after having received external information outside of any complaints.

Vodafone GmbH is a telecommunications service provider operating on the German market. The company uses different distribution channels, including local shops, of which some are operated by partner agencies. They are acting under the Vodafone brand and are bound to the company’s instructions. Their IT systems are based on hard- and software provided by Vodafone. Data Processing Agreements govern the processing of customer data.

Investigations discovered privacy related weaknesses in the processes to supervise and audit the processors as well as weaknesses in the IT systems leading to the risk of customer data being misused for fraud. Such risks actually materialized in some cases.

Furthermore, Vodafone offers an online service portal for its customers. When used in combination with the company’s hotline, investigations by the German Federal SA found weaknesses in the authentication process for the customer accounts that could lead to misuse of eSIMs. The company has taken steps to remediate any shortcomings found. (source: edpb.europa.eu/photo freepik.com)

Comments

Post a Comment

Popular posts from this blog

The Delivery Delay Clause in Residential Construction Contracts: Consumer Protection in Cyprus and Europe

Image
By Giorgos Kazoleas, LL.M., Lawyer, Managing Partner at Legal Experts Cyprus The purchase or construction of a new residence is one of the most significant financial and personal decisions a consumer can make. Residential construction contracts or agreements for the sale of property under construction are a crucial and defining element of the entire process, as certain terms they may contain can be detrimental to the buyer. One of the most critical aspects is the contractual delivery time of the project and the provision for delay, through the so-called delivery delay clause. The Delivery Delay Clause: Its Role and Legal Nature The delivery delay clause (also known as a penalty clause in the event of default) is a term usually included in the contract that specifies a predetermined compensation amount that the contractor or seller must pay to the buyer for every day, week, or month of delay beyond the agreed delivery date. The purpose of the clause is twofold: -Compensatory: ...
Read more

Ombudsman inquiry on Commission President’s text messages is a wake-up call for EU

Image
The European Ombudsman inquiry into the Commission’s handling of a request for text messages between its President and the CEO of a pharmaceutical company is a wake-up call for all EU institutions about ensuring accountability in an era of instant messaging. One year after the initial request by a journalist, the Commission has still not clarified whether messages reported to concern major vaccine procurement deals exist and whether the public is entitled to see them. The Ombudsman had asked the Commission, in a finding of maladministration in January, to conduct a more thorough search for the text messages. The Commission’s recent response failed to say whether it had looked directly and correctly for the text messages and if not, why not. While the response recognised that work-related text messages can be EU documents, it reiterated that the Commission’s internal policy is, in effect, not to register text messages. The Ombudsman has closed  the inquiry  and upheld...
Read more

Fully-funded PhD position in AI, Law and Public Power

Image
Erasmus University Rotterdam School of Law, department Law & Markets, is looking for a fulltime PhD researcher in AI, Law and Public Power (4,5 years with 20% teaching tasks). PhD AI, Law and Public Power Are you curious about how artificial intelligence is changing state actor powers? Do you want to conduct critical and in-depth legal research at the intersection of technology, law and power? And would you like to combine that with academic teaching? Then this PhD position at Erasmus School of Law is for you. Within the Law & Markets team, you will spend 4.5 years researching the legal regulation of AI in the public sector. How do we protect fundamental rights when algorithms help decide on who receives public benefits, how to perform enforcement or how to enact environmental policy? What is the role of the state, and where is the limit of government power in a data-driven society? You will have plenty of space to choose your own research angle and work in a multidisci...
Read more

Annual Report on the execution of the European Court's judgments and decisions

Image
The Secretary General of the Council of Europe, Alain Berset, has called for further efforts to implement judgments from the European Court of Human Rights. Commenting on the  annual report for 2024  on the execution of the Court’s rulings, published today, the Secretary General said: “ This report shows what a concrete, positive impact judgments from the European Court of Human Rights have on the daily lives of the people of Europe. While a lot has been achieved, more needs to be done. The efficient execution of the Court's judgments is essential for the rule of law and democratic accountability in Europe .” The annual report from the Council of Europe’s Committee of Ministers shows that 992 cases were transferred from the European Court of Human Rights to Committee, which supervises their implementation by member states, in 2024. Of those 992 new cases, 194 were “leading” cases – often requiring action to be taken by states to prevent the same violations happ...
Read more

Buying Property in Cyprus: Why Due Diligence is the Buyer's Legal Shield

Image
By Giorgos Kazoleas, Lawyer in Cyprus For most people, purchasing property in Cyprus is the most significant investment of their lifetime. However, behind an attractive photo in an online listing or a "bargain" price, hidden legal traps can easily turn a dream investment into a financial nightmare. Property Due Diligence is far more than a mere formality. It is a rigorous, essential investigation that ensures the property you are buying is legally "sound," free of encumbrances, and in full compliance with urban planning regulations. What Does a Comprehensive Legal Check Include? Before any contracts are signed or any funds are transferred to the Seller, the following elements must be subjected to a thorough legal audit: Ownership Status: Is the seller the actual and sole registered owner? Do they hold the full share of the property being sold? Encumbrances and Charges: Are there any active mortgages, "memos" (court judgments), or other regional bur...
Read more

Prison overcrowding remains a problem in Europe: Council of Europe’s annual penal statistics for 2023

Image
Prison overcrowding continues to be an acute and persistent problem in a significant number of European prison administrations, according to the Council of Europe’s Annual Penal Statistics on Prison Populations ( SPACE I ) for 2023. In countries with over 500,000 inhabitants, twelve prison administrations reported having more inmates than places available in January 2023. Overall, in Europe, the number of prisoners per 100 places available grew by 2% from 31 January 2022 to 31 January 2023 (from 91.7 to 93.5 inmates). Seven prison administrations reported a prison density of more than 105 inmates per 100 places available, indicating severe overcrowding: Cyprus (166 inmates per 100 places), Romania (120), France (119), Belgium (115), Hungary (112), Italy (109) and Slovenia (107). Five prison administrations reported very high prison density: Greece (103), Sweden (102), North Macedonia (101), Croatia (101) and Türkiye (100). Other administrations reported a prison density...
Read more

Cancellation of a flight: The refund of the airline ticket price must include the commission collected by an intermediary at the time of purchase (CJEU)

Image
Judgment of the Court in Case C-45/24 (15.1.2026)- Verein für Konsumenteninformation : Cancellation of a flight: the refund of the airline ticket price must include the commission collected by an intermediary at the time of purchase. It is not necessary for the airline to know the exact amount of that commission. Several travellers purchased airline tickets on the booking portal of the Opodo travel agency [1] for a KLM return flight from Vienna (Austria) to Lima (Peru). Since the flights were cancelled, KLM reimbursed the amount they had paid, minus approximately € 95 that Opodo had charged them as agency commission. The air passengers concerned assigned their potential rights to reimbursement to a consumer protection association. That association contends, before the Austrian courts, that the reimbursement of the cost of the airline tickets by the airline in question should include the agency commission charged to passengers, as in the present case, by a travel agency acting as that a...
Read more