Sanction RGPD Hellenic Data Protection Authority (HDPA) — Vodafone – PANAFON A.E.E.T. : 550 k€ (2025)
- Autorité de contrôle
- Hellenic Data Protection Authority (HDPA)
- Pays
- Grèce
- Entreprise / secteur
- Vodafone – PANAFON A.E.E.T.
- Montant de l'amende
- 550 k€
- Date de la décision
- 25 juin 2025
- Fondement juridique
- Art. 5 (1) d), Art. 28 (1), (3),
- Manquement
- Mesures techniques et organisationnelles insuffisantes
Résumé des faits
The Greek DPA has imposed a fine of EUR 550,000 on Vodafone – PANAFON A.E.E.T. The controller failed to implement sufficient technical and organisational measures to ensure data security, resulting in a telecommunications shop being able to wrongfully assign multiple SIM cards to an individual. The controller also failed to use a processor that could guarantee the implementation of sufficient technical and organisational measures, and failed to govern the processing with an adequate data processing agreement.