ΥΠΗΡΕΣΙΑ 800 ΤΕΛΕΠΕΡΦΟΡΜΑΝΣ ΜΟΝΟΠΡΟΣΩΠΗ Α.Ε. ΠΑΡΟΧΗΣ ΥΠΗΡΕΣΙΩΝ (Teleperformance Greece): Insufficient fulfilment of data subjects rights

The authority found violations of multiple GDPR provisions, including principles of lawfulness and integrity/confidentiality (Art. 5), controller accountability (Art. 5(2)), timeliness of responses (Art. 12(3)), transparency obligations (Art. 13), access rights (Art. 15), erasure exceptions (Art. 17(3)(e)), and security measures (Art. 32). The decision, issued on October 5, 2026, addressed the company's failure to properly handle employee data subject requests and implement adequate data protection measures.