Vodafone Italia was fined EUR 12,251,601 for unlawful processing of personal data belonging to millions of customers, for telemarketing purposes. The legal proceedings were preceded by hundreds of complaints coming from data subjects about unsolicited phone calls, which made the data protection authority to start the investigations. During the investigation, several violations of the data protection law were discovered, such as a violation of the consent requirements and the violation of general data protection obligations (accountability, for instance). The data protection authority criticized the use of fake phone numbers by the Vodafone contracted call centers (in that the phone numbers had not been registered with the National Consolidated Registry of Communication Operators). Moreover, Vodafone was also found guilty of several violations regarding the handling of contact lists obtained from external providers. Lastly, the data protection authority considered the security measures used to manage the customer data to be inadequate and insufficient.
vodafone italia was   for unlawful processing of personal data belonging to millions of customers for telemarketing purposes the legal proceedings were preceded by hundreds of complaints coming from data subjects about unsolicited phone calls which made the data protection authority to start the investigations during the investigation several s of the data protection law were discovered such as a  of the consent requirements and the  of general data protection obligations accountability for instance the data protection authority criticized the use of fake phone numbers by the vodafone contracted call centers in that the phone numbers had not been registered with the national consolidated registry of communication operators moreover vodafone was also found guilty of several s regarding the handling of contact lists obtained from external providers lastly the data protection authority considered the security measures used to manage the customer data to be inadequate and insufficient
vodafone italia     unlawful process  personal data belong  millions  customers  telemarketing purpose  legal proceed  precede  hundreds  complaints come  data subject  unsolicited phone call  make  data protection authority  start  investigations   investigation several    data protection law  discover       consent requirements     general data protection obligations accountability  instance  data protection authority criticize  use  fake phone number   vodafone contract call center    phone number    register   national consolidate registry  communication operators moreover vodafone  also find guilty  several  regard  handle  contact list obtain  external providers lastly  data protection authority consider  security measure use  manage  customer data   inadequate  insufficient