Enforcement · Hellenic Data Protection Authority (HDPA) EN LLM context A cited markdown file you can paste into your AI assistant (ChatGPT, Claude, a RAG or project knowledge base) to ground it in this document. Contains: this document’s text, its sections with their topics, and the full text of every law provision it applies. Everything links back to its source on overview.legal — legal information, not advice.

Vodafone: Insufficient fulfilment of data breach notification obligations

€40,000 Fine
Vodafone
GREECE
Art. 15 GDPR Art. 33 GDPR
Notification Obligation Data Breaches Article 19 GDPR - Notification of Rectification, Erasure or Restriction Notified Body Reporting and Notification Obligations Telecommunications Law Enforcement Processing Agreement Supervisory Authorities
Feb 20, 2023 Source

How it connects

Related across sources

Guidance EDPB Annual Report 2021 EDPB News Data Protection Officer or Chief Privacy Officer?The rise of the Data Protection Officer White Label Consultancy Guidance Guidelines 01/2021 EDPB Guidance Guidelines 10/2020 on restrictions under Article 23 GDPR EDPB Guidance Guidelines 07/2020 on the concepts of controller and processor in the GDPR EDPB Guidance Opinion 14/2019 on the draft Standard Contractual Clauses submitted by the DK SA (Article 28(8) GDPR) EDPB

Full text

The Hellenic DPA has imposed a fine of EUR 40,000 on Vodafone. An individual had filed a complaint with the DPA because, following a request for access to records of conversations with a Vodafone call center, Vodafone had provided them with another customer's conversations. Vodafone in addition failed to report this incident to the DPA in a timely manner.

Industry: Media, Telecoms and Broadcasting

Original document at the source www.dpa.gr

Similar Content