Source
Comments
No.
The Privacy Policy states that Vodafone will not be accountable for unauthorised access:
"Communications over the internet (such as emails) aren’t secure unless they’ve been encrypted. Your communications may go through a number of countries before being delivered – as this is the nature of the internet. We can’t accept responsibility for any unauthorised access or loss of personal information that’s beyond our control."
There is a statement from the 2015 breach, however, it is not a policy and no policy seems to have been developed ever since.