Greece

MEDIATEL Telephone Information Services S.A.

45,000 €

GDPR enforcement action by Hellenic Data Protection Authority (HDPA) on 2026-06-02.

Rank · Sector

#119

of 619 in Industry and Commerce

Rank · Greece

#27

of 102

Rank · All fines

#802

of 3,152

Case details

Authority: Hellenic Data Protection Authority (HDPA)
Date: 2026-06-02
Controller / Processor: MEDIATEL Telephone Information Services S.A.
Sector: Industry and Commerce
Quoted Articles: Art. 32 GDPR
Type of violation: Insufficient technical and organisational measures to ensure information security

Summary

The Greek DPA has imposed a fine of EUR 45,000 on MEDIATEL Telephone Information Services S.A. The controller is a Greek electricity supplier. For marketing purposes, the controller hired four call centres, which acted as processors; MEDIATEL was one of these processors. The authority found that the controller and processors had failed to implement measures to ensure the security of processing personal data in all four cases. Consequently, customers received unsolicited calls from the processors. Specifically, MEDIATEL synchronised its database with the controller's opt-out register only once a day, leaving a large window for unsolicited calls. These events took place between 2021 and 2024. The controller aswell as the other processors were fined by the authority.

Open original source Links to the regulator's original publication or another source.