WIND Ελλάς Τηλεπικοινωνίες ΑΕΒΕ: Insufficient fulfilment of data subjects rights

The Hellenic DPA has fined WIND Ελλάς Τηλεπικοινωνίες ΑΕΒΕ EUR 2,000. A customer of the company had sent an email requesting access to the footage recorded by the store's cameras on which they appeared. The data subject never received a response to this request. Only when the authority asked for a response did the controller reply that the data subject's request could not be fulfilled because the recorded material had been deleted. The DPA considered this to be a violation of Art. 15 GDPR.

GDPR Articles: Art. 15 GDPR
Industry: Media, Telecoms and Broadcasting