The Italian arm of multinational telecommunications company Vodafone is facing a fine of more than €12.25 million (U.S. $14.5 million) under the General Data Protection Regulation (GDPR) for aggressive telemarketing practices.

The fine, ordered Nov. 12, is the third-largest handed down by the Italian Data Protection Authority (“Garante”) this year and addresses multiple alleged violations of the EU’s landmark privacy legislation. The penalty is the first Vodafone has faced in Italy but far from the first the company has had levied against it under the GDPR.