Vodafone – PANAFON A.E.E.T. – €30,000 Fine (Greece, 2026)

€30,000Hellenic Data Protection Authority11 February 2026Greece
final
Fine

General GDPR enforcement action

This case relates to broader data protection obligations, not specifically to cookie or consent banner compliance. It is not included in cookie statistics or the Risk Calculator.

Vodafone – PANAFON A.E.E.T. was fined €30,000 for not properly handling a customer's request to access their call recordings. The company only partially fulfilled the request and provided conflicting information. This case shows the importance of clear communication and timely responses to user requests.

What happened

Vodafone failed to fully and timely respond to a customer's request for access to their call recordings.

Who was affected

A customer of Vodafone who requested access to their call recordings.

What the authority found

The Greek DPA ruled that Vodafone did not adequately handle the customer's request and failed to preserve the requested recordings, violating GDPR's requirements for data access.

Why this matters

This ruling highlights the necessity for companies to have clear processes in place for handling user requests and to communicate effectively with customers.

GDPR Articles Cited

AI-verified

Art. 15(GDPR)
Art. 18(GDPR)
Art. 12(1) GDPR
View original scraped data
Art. 12(1) GDPR
(2)
(3)
(4) GDPR
Art. 15(GDPR)
Art. 18(GDPR)

Original data from scraper before AI verification against source document.

Source verified 23 April 2026
articles corrected
Full Legal Summary
Detailed

The Greek DPA has imposed a fine of EUR 30,000 on Vodafone – PANAFON A.E.E.T. The controller failed to handle a data subject's requests to exercise her rights. Specifically, a data subject requested access to call recordings relating to them, but the controller only partially fulfilled this request and did so neither properly nor in a timely manner. The controller also failed to preserve certain call recordings despite a request to do so, which further undermined the data subject’s ability to exercise their rights. Furthermore, the controller provided contradictory information about the procedure for accessing the recordings.

Details

Fine Date

11 February 2026

Authority

Hellenic Data Protection Authority

Fine Amount

€30,000

Enforcement Tracker ID

ETid-3106

About this data

Data: CMS GDPR Enforcement Tracker
Licensed under CC BY-NC-SA 4.0
AI-verified and classified

Cite as: Cookie Fines. Vodafone – PANAFON A.E.E.T. - Greece (2026). Retrieved from cookiefines.eu

Report Inaccuracy

Last updated: