# One Way Private Company: Insufficient technical and organisational measures to ensure information security

- Type: Enforcement
- Source: Hellenic Data Protection Authority (HDPA)
- Date: 2021-12-08
- Original: https://www.enforcementtracker.com/ETid-957
- Canonical: https://overview.legal/posts/47072
- Topics: Security, Telecommunications, Privacy by Design & Default, Controllers, Processing Agreement, Direct Marketing, Personal Data, Law Enforcement, Supervisory Authorities, Data Controller

## Summary

The Hellenic DPA has imposed a fine of EUR 30,000 on One Way Private Company. The DPA received 17 complaints regarding illegal telephone calls for the purpose of advertising. The DPA found that due to an error in the controller's application, telephone calls were made to subscribers included in the list for protection against unsolicited telephone advertising 'Register 11'. The DPA concluded that the controller had failed to implement technical and organizational measures to ensure a level of se

## Full text

The Hellenic DPA has imposed a fine of EUR 30,000 on One Way Private Company. The DPA received 17 complaints regarding illegal telephone calls for the purpose of advertising. The DPA found that due to an error in the controller's application, telephone calls were made to subscribers included in the list for protection against unsolicited telephone advertising 'Register 11'. The DPA concluded that the controller had failed to implement technical and organizational measures to ensure a level of security appropriate to the risk to the data subjects.

GDPR Articles: Art. 28 (3) c) GDPR, Art. 32 (2), (4) GDPR, Art. 11 (1) Νόμος 3471/2006
Industry: Media, Telecoms and Broadcasting

---
Generated by overview.legal · https://overview.legal/posts/47072 · 2026-08-22