# Vodafone: Insufficient fulfilment of data breach notification obligations

- Type: Enforcement
- Source: Hellenic Data Protection Authority (HDPA)
- Date: 2023-02-20
- Original: https://www.enforcementtracker.com/ETid-1767
- Canonical: https://overview.legal/posts/47882
- Topics: Notification Obligation, Data Breaches, Article 19 GDPR - Notification of Rectification, Erasure or Restriction, Notified Body Reporting and Notification Obligations, Telecommunications, Law Enforcement, Processing Agreement, Supervisory Authorities

## Summary

The Hellenic DPA has imposed a fine of EUR 40,000 on Vodafone. An individual had filed a complaint with the DPA because, following a request for access to records of conversations with a Vodafone call center, Vodafone had provided them with another customer's conversations. Vodafone in addition failed to report this incident to the DPA in a timely manner.

## Full text

The Hellenic DPA has imposed a fine of EUR 40,000 on Vodafone. An individual had filed a complaint with the DPA because, following a request for access to records of conversations with a Vodafone call center, Vodafone had provided them with another customer's conversations. Vodafone in addition failed to report this incident to the DPA in a timely manner.

GDPR Articles: Art. 15 GDPR, Art. 33 GDPR
Industry: Media, Telecoms and Broadcasting

---
Generated by overview.legal · https://overview.legal/posts/47882 · 2026-08-22