HDPA (Greece) · 21 September 2021
Member of parliamentPrivate person
About: Data principles, Data security
FineNo fineViolation found
- Regulator
- HDPA (Greece)
- Decided
- 21 September 2021
- Country
- Greece
- Sector
- Not given
- Regulator’s reference
- 42/2021
- Fino case number
- 2021/GR/024
What happened
The Greek DPA held that sending bulk emails with all recipients' email addresses entered in the "To" field is not compliant with Article 32 of the GDPR. It recommended the use of BCC as an alternative.
Summary from GDPRhub (noyb), written by its volunteers, not by Fino. CC BY-NC-SA 4.0.
Rules involved
- Art. 5Principles relating to processing of personal data5(1)(d) · 5(1)(f)Read →
- Art. 32Security of processingRead →
- Data principles
- Data security
Sources
The facts on this page come from the sources above, as they recorded them. Nothing has been estimated or filled in. Not legal advice.
Spotted a mistake? Write to angelillolorenzo@gmail.com and quote 2021/GR/024.