Greece

Vodafone

40,000 €

GDPR enforcement action by Hellenic Data Protection Authority (HDPA) on 2023-02-20.

Rank · Sector

#228

of 366 in Media, Telecoms and Broadcasting

Rank · Greece

#21

of 93

Rank · All fines

#816

of 3,042

Case details

Authority: Hellenic Data Protection Authority (HDPA)
Date: 2023-02-20
Controller / Processor: Vodafone
Sector: Media, Telecoms and Broadcasting
Quoted Articles: Art. 15 GDPR, Art. 33 GDPR
Type of violation: Insufficient fulfilment of data breach notification obligations

Summary

The Hellenic DPA has imposed a fine of EUR 40,000 on Vodafone. An individual had filed a complaint with the DPA because, following a request for access to records of conversations with a Vodafone call center, Vodafone had provided them with another customer's conversations. Vodafone in addition failed to report this incident to the DPA in a timely manner.

Open original source Links to the regulator's original publication or another source.