OTE Group

€3,200,000

Insufficient technical and organisational measures to ensure information security

Ngày ra quyết định

27 tháng 1, 2022

Thẩm quyền

Hellenic Data Protection Authority (HDPA)

GR

Ngành

Media, Telecoms and Broadcasting

Quốc gia

GR

Luật

GDPR

Trạng thái

FINAL

Mô tả

The Hellenic DPA has imposed a fine of EUR 3.2 million on Cosmote subsidiary OTE Group. Among other things, OTE Group had contributed to Cosmote's security infrastructure. Cosmote had reported a data breach to the DPA under Article 33 of the GDPR. A hacker had been able to penetrate Cosmote's systems due to a lack of security measures and obtained and subsequently leaked data from customers. The stolen data included sensitive information, from Cosmote subscribers such as age, gender and contract information. Nearly 10 million people were affected by the incident. For this reason, the DPA found that OTE Group had failed to implement adequate technical and organizational measures to ensure a level of security commensurate with the risk to data subjects.

Trích dẫn pháp lý

Art. 32

Vấn đề & Vi phạm

Insufficient technical and organisational measures to ensure information security

Cập nhật thông tin về việc thực thi quy định bảo vệ dữ liệu cá nhân

Chúng tôi tôn trọng quyền riêng tư của bạn. Chỉ một email mỗi tháng, không spam, có thể hủy đăng ký bất cứ lúc nào.