Greece

One Way Private Company

30,000 €

GDPR enforcement action by Hellenic Data Protection Authority (HDPA) on 2021-12-08.

Rank · Sector

#251

of 366 in Media, Telecoms and Broadcasting

Rank · Greece

#24

of 93

Rank · All fines

#888

of 3,039

Case details

Authority: Hellenic Data Protection Authority (HDPA)
Date: 2021-12-08
Controller / Processor: One Way Private Company
Sector: Media, Telecoms and Broadcasting
Quoted Articles: Art. 28 (3) c) GDPR, Art. 32 (2), (4) GDPR, Art. 11 (1) Νόμος 3471/2006
Type of violation: Insufficient technical and organisational measures to ensure information security

Summary

The Hellenic DPA has imposed a fine of EUR 30,000 on One Way Private Company. The DPA received 17 complaints regarding illegal telephone calls for the purpose of advertising. The DPA found that due to an error in the controller's application, telephone calls were made to subscribers included in the list for protection against unsolicited telephone advertising "Register 11". The DPA concluded that the controller had failed to implement technical and organizational measures to ensure a level of security appropriate to the risk to the data subjects.

Open original source Links to the regulator's original publication or another source.