The Spanish Agency for Data Protection has issued a resolution fining Google 10 million euros and Vodafone Spain 3.94 million for breaching the General Data Protection Regulation (RGPD). The RGPD is the European regulation related to the protection of natural persons with regard to the processing of their personal data and the free circulation thereof.
According to the resolution of the Spanish body, published this Wednesday in the Official State Gazette (BOE) and dated May 9, the sanction imposed on Google is due to the breach of article 6 and article 17 of the RGPD, in which regulate the legality of data processing and the 'right to be forgotten', respectively.
For its part, Vodafone Spain has been fined almost 4 million euros for violating part of article 5 of the Regulation, which regulates the guarantees for the confidentiality and integrity of personal data.
By virtue of the Organic Law on Data Protection and guarantee of digital rights, the Spanish Data Protection Agency is obliged to publish these sanctions in the BOE when they affect legal persons and their amount exceeds one million euros.