Vodafone
€40,000
Insufficient fulfilment of data breach notification obligations
Decision Date
20 de fevereiro de 2023
Authority
Hellenic Data Protection Authority (HDPA)
GR
Sector
Media, Telecoms and Broadcasting
Country
GR
Law
GDPRStatus
FINALDescription
The Hellenic DPA has imposed a fine of EUR 40,000 on Vodafone. An individual had filed a complaint with the DPA because, following a request for access to records of conversations with a Vodafone call center, Vodafone had provided them with another customer's conversations. Vodafone in addition failed to report this incident to the DPA in a timely manner.
Legal Citations
Art. 15Art. 33
Issues & Violations
Insufficient fulfilment of data breach notification obligations