Severity: Info Other, enforcement EU
DPA Greece fines Vodafone for data breach and inadequate security measures
Original title: Επιβολή προστίμου στη Vodafone για περιστατικό παραβίασης και ανεπαρκή μέτρα ασφάλειας
- Published
- Source: dpa.gr
- Effective
- Not stated
- Deadline
- Not stated
- Framework: GDPR
- Regulation (EU) 2016/679 (as corrected 2018) source
- in 14 days
- Indicative European Parliament plenary date (first reading) for the small mid-caps omnibus, COM(2025) 501, which would raise the Article 30 records exemption to organisations under 750 employees - a forecast, not a fixed date source
Why it matters
The Greek Data Protection Authority (DPA) has issued a fine to Vodafone for a data breach incident and for failing to maintain adequate security measures. This decision demonstrates the DPA's enforcement of GDPR requirements regarding data protection and security obligations. Organisations operating in Greece must ensure robust security controls and proper incident response procedures to comply with data protection regulations.
What changed
- DPA Greece (Decision 28/25.06.2025) issued an administrative fine against Vodafone for a data breach incident and inadequate security measures as required under GDPR Article 83
Who is affected
Telecommunications companies and data controllers operating in Greece; organisations subject to GDPR requirements
What to do
AI-assisted summary of the official document; the official text prevails. Not legal advice.