Greece

Vodafone – PANAFON A.E.E.T.

30,000 €

GDPR enforcement action by Hellenic Data Protection Authority (HDPA) on 2026-02-11.

Rank · Sector

#262

of 369 in Media, Telecoms and Broadcasting

Rank · Greece

#29

of 93

Rank · All fines

#926

of 3,050

Case details

Authority: Hellenic Data Protection Authority (HDPA)
Date: 2026-02-11
Controller / Processor: Vodafone – PANAFON A.E.E.T.
Sector: Media, Telecoms and Broadcasting
Quoted Articles: Art. 12 (1), (2), (3), (4) GDPR, Art. 15 GDPR, Art. 18 GDPR
Type of violation: Insufficient fulfilment of data subjects rights

Summary

The Greek DPA has imposed a fine of EUR 30,000 on Vodafone – PANAFON A.E.E.T. The controller failed to handle a data subject's requests to exercise her rights. Specifically, a data subject requested access to call recordings relating to them, but the controller only partially fulfilled this request and did so neither properly nor in a timely manner. The controller also failed to preserve certain call recordings despite a request to do so, which further undermined the data subject’s ability to exercise their rights. Furthermore, the controller provided contradictory information about the procedure for accessing the recordings.

Open original source Links to the regulator's original publication or another source.