Vodafone Greece – ΠΑΝΑΦΟΝ Ανώνυμη Ελληνική Εταιρεία Τηλεπικοινωνιών

What happened

The DPA fined a company €20,000 for failing to inform a former employee before disclosing emails containing her personal data to her former supervisor. It also fined the supervisor €2,000 as a separate controller for failing to inform her about his collection, retention and later disclosure of the emails for use in litigation.

Summary from GDPRhub (noyb), written by its volunteers, not by Fino. CC BY-NC-SA 4.0.

Rules involved

• Art. 2Material scope2(2)(c)Read →
• Art. 6Lawfulness of processing6(1)(f)Read →
• Art. 14Information to be provided where personal data have not been obtained from the data subject14(3)(c)Read →

• Transparency
• Unlawful processing