Imposition of fine on a telecommunications company for violations of data subject’s rights

  • National News
  • gr

Background information

  • Date of final decision: 11 February 2026
  • National case
  • Controller: Vodafone-Panafon S.A Hellenic Telecommunications Company
  • Legal Reference: Article 12: Transparent information, communication and modalities for the exercise of the rights of the data subject, Article 12.2: Facilitation of the exercise of the rights of the data subject, Article 12.3: Time limit for responding to a request, Article 12.4: Information to be provided where no action is taken on the request, Article 15: Right of access by the data subject, Article 18: Right to restriction of processing
  • Decision: Infringement of the GDPR; fine imposed; order to comply 
    Key words: Transparent information, communication and exercise of the rights of the data subject 

Summary of the Decision

Origin of the case

A complaint was submitted to the Greek SA against Vodafone-Panafon S.A Hellenic Telecommunications Company for

  1. violation of the right of access to recorded calls,
  2. violation of the right to restriction of processing,
  3. obstacles placed by the respondent during the exercise of the aforementioned right of access, and
  4. contradictory information regarding the procedure for satisfying the exercised right of access.

Key Findings

The Authority found that the respondent company infringed the provisions of Articles 12(1), (2), (3), (4), 15 and 18 of the GDPR pursuant to Articles 58(2)(i) and 83(5)(b) of the GDPR. 

Decision

The Greek SA imposed on the telecommunications company, an administrative fine of EUR 30.000 for violating Articles 12(1), (2), (3), (4), 15 and 18 of the GDPR. 
It also ordered, pursuant to Article 15(4)(b) of national Law 4624/2019, the respondent company to adopt appropriate technical and organisational measures to ensure the proper and timely examination of data subjects’ rights, including more effective training of its representatives, and to provide the Authority with relevant documentation within six months.


For further information: national decision in Greek Επιβολή προστίμου σε πάροχο υπηρεσιών τηλεπικοινωνίας  

Relevant topics
Fines
Data subject rights

Latest news

  • EDPB News

One-Stop-Shop case digest on right to object and right to erasure updated

  • EDPB News

Supporting GDPR consistency: EDPB launches dedicated form

  • EDPB News

EDPB gets a new look: discover the new website and brand identity