Δ.Ε.Η. Α.Ε. (Public Power Corporation)

What happened

The DPA fined an electricity provider €25,000 for the failure to comply with a data subject’s erasure and rectification requests and for continuously sending incorrect invoices to the data subject, thus violating Articles 5, 16 and 17 GDPR.

Summary from GDPRhub (noyb), written by its volunteers, not by Fino. CC BY-NC-SA 4.0.

Rules involved

• Art. 2Material scope2(3)Read →
• Art. 5Principles relating to processing of personal data5(1)(a) · 5(1)(d)Read →
• Art. 12Transparent information, communication and modalities for the exercise of the rights of the data subject12(2)Read →
• Art. 16Right to rectificationRead →
• Art. 17Right to erasure (‘right to be forgotten’)Read →

• Data principles
• Data subject rights
• Transparency