Vodafone
€40,000
Insufficient fulfilment of data breach notification obligations
Date de décision
20 février 2023
Autorité
Hellenic Data Protection Authority (HDPA)
GR
Secteur
Media, Telecoms and Broadcasting
Pays
GR
Droit
GDPRStatut
FINALDescription
The Hellenic DPA has imposed a fine of EUR 40,000 on Vodafone. An individual had filed a complaint with the DPA because, following a request for access to records of conversations with a Vodafone call center, Vodafone had provided them with another customer's conversations. Vodafone in addition failed to report this incident to the DPA in a timely manner.
Citations légales
Art. 15Art. 33
Questions et violations
Insufficient fulfilment of data breach notification obligations