Greece

Parliamentary election candidate

2,000 €

GDPR enforcement action by Hellenic Data Protection Authority (HDPA) on 2022-06-24.

Rank · Sector

#313

of 357 in Public Sector and Education

Rank · Greece

#86

of 93

Rank · All fines

#2,304

of 3,050

Case details

Authority: Hellenic Data Protection Authority (HDPA)
Date: 2022-06-24
Controller / Processor: Parliamentary election candidate
Sector: Public Sector and Education
Quoted Articles: Art. 12 GDPR, Art. 11 Law 3471/2006
Type of violation: Insufficient fulfilment of data subjects rights

Summary

The Hellenic DPA has imposed a fine of EUR 2,000 on a parliamentary election candidate.

A data subject had filed a complaint with the DPA because of receiving unsolicited election advertising via SMS from the politician.

The data subject had given the politician, who was a minister before the election, their own contact details, but not for the purpose of election advertising. The politician had therefore processed the data for a purpose other than that agreed, without the data subject having consented to this or having been informed about it.

The data subject thereupon requested the deletion of their data as well as the ceasing of the SMS sending. However, the politician did not comply with this request and the SMS continued to be sent.

Open original source Links to the regulator's original publication or another source.