Severity: Info Other, enforcement GR

Violation of data subjects' rights to access and deletion by electricity provider

Original title: Παραβίαση δικαιώματος πρόσβασης, διόρθωσης, διαγραφής από πάροχο ηλεκτρικής ενέργειας

Published
Source: dpa.gr
Effective
Not stated
Deadline
Not stated
Framework: Greece data protection law
Law 4624/2019 (as last amended by Law 5221/2025) source

Why it matters

The Hellenic Data Protection Authority issued a decision establishing a violation of data subjects' rights to access, rectification and deletion of data by an electricity provider. The decision emphasizes the obligations of energy providers to respect the rights of data subjects in accordance with applicable data protection legislation. Energy providers must ensure that users' requests for access, rectification and deletion of their personal data are processed promptly and correctly.

What changed

  • The Hellenic Data Protection Authority (HDPA) issued a formal decision (Decision 42/2025) regarding violations of personal data rights by an electricity provider
  • Violations of the right of access to personal data, as provided for in data protection legislation, were documented
  • Violations of the right to rectification of inaccurate data were documented
  • Violations of the right to erasure (right to be forgotten) of personal data were documented
  • Obligations were established for the electricity provider to comply with data protection legislation

Who is affected

Electricity providers in Greece, consumers and users of electricity services

What to do

AI-assisted summary of the official document; the official text prevails. Not legal advice.