Epic Ltd.
€3,250
Insufficient legal basis for data processing
Decision Date
February 3, 2023
Authority
Cypriot Data Protection Commissioner
CY
Sector
Media, Telecoms and Broadcasting
Country
CY
Law
GDPRStatus
FINALDescription
The Cypriot DPA has imposed a fine of EUR 3,250 on Epic Ltd. The contoller had made unsolicited calls to 332 former customers without a valid legal basis. The DPA also found that the controller had not taken appropriate technical and organizational measures to prove that data processing was carried out in compliance with the GDPR.
Legal Citations
Art. 6 (1)Art. 24 (1)Art. 32 (1)
Issues & Violations
Insufficient legal basis for data processing