Hellenic Data Protection Authority (HDPA) · 12 May 2021
KARIERA A.E.
Insufficient fulfilment of data subjects rights
Fine€5,000Fine issued
- Regulator
- Hellenic Data Protection Authority (HDPA)
- Decided
- 12 May 2021
- Country
- Greece
- Sector
- Industry and Commerce
- Regulator’s reference
- Not recorded
- Fino case number
- 2021/GR/013
What happened
The Greek DPA fined a service provider €5000 for failure to properly execute a data's subject request for erasure due to a technical error which meant that their personal data had been duplicated on the company's servers. The DPA found that 79 other data subjects had also been affected by this error.
Summary from the GDPRhub page for this decision, written by its volunteers, not by Fino. CC BY-NC-SA 4.0.
Rules involved
- Art. 17Right to erasure (‘right to be forgotten’)Read →
- Art. 21Right to objectRead →
- Art. 25Data protection by design and by defaultRead →
- Accountability
- Data subject rights
Sources
The facts on this page come from the sources above, as they recorded them. Nothing has been estimated or filled in. Not legal advice.
Spotted a mistake? Write to angelillolorenzo@gmail.com and quote 2021/GR/013.