Enforcement
EN Vodafone: Insufficient fulfilment of data breach notification obligations
€40,000 fine - Hellenic Data Protection Authority (HDPA)
Content
The Hellenic DPA has imposed a fine of EUR 40,000 on Vodafone. An individual had filed a complaint with the DPA because, following a request for access to records of conversations with a Vodafone call center, Vodafone had provided them with another customer's conversations. Vodafone in addition failed to report this incident to the DPA in a timely manner.
GDPR Articles: Art. 15 GDPR, Art. 33 GDPR
Industry: Media, Telecoms and Broadcasting