DPO SchoolDPO School

Fine · Germany

Vodafone GmbH: EUR 45,000,000

Reviewed by Sergio Maldonado Elvira on 29 October 2026

Authority
Federal Commissioner for Data Protection and Freedom of Information (BfDI)
Country
Germany
Date
Decision of 10 March 2025
Amount
EUR 45,000,000, as imposed (not converted)
Appeal status
Unknown
Provisions cited
Article 28(1), Article 32(1)

What the fine was for (summary, not the official text)

Two fines: EUR 15 million for poor supervision and auditing of partner shops acting as processors (staff misused customer data for fraud) and EUR 30 million for weak authentication in the online portal and hotline that allowed eSIM misuse.

Checked against the official source on 28 October 2026.

Only the authority's decision is authoritative. This is reference material, not legal advice.

All fines