Vodafone – PANAFON A.E.E.T. – €30,000 Fine (Greece, 2026)

€30,000Hellenic Data Protection Authority11 February 2026Greece
final
Fine

General GDPR enforcement action

This case relates to broader data protection obligations, not specifically to cookie or consent banner compliance. It is not included in cookie statistics or the Risk Calculator.

Vodafone – PANAFON A.E.E.T. was fined €30,000 for not properly handling a customer's request to access their call recordings. This matters because it shows that companies must take customer requests seriously and respond correctly. Failing to do so can lead to penalties and damage trust with users.

What happened

Vodafone failed to properly fulfill a customer's request for access to their call recordings.

Who was affected

The customer who requested access to their call recordings was affected.

What the authority found

The Greek Data Protection Authority found that Vodafone did not handle the customer's request in a timely and proper manner, violating GDPR rules.

Why this matters

This case highlights the importance of companies being responsive to user requests. Businesses should ensure they have clear processes for handling such requests to avoid fines.

GDPR Articles Cited

AI-verified

Art. 15(GDPR)
Art. 18(GDPR)
Art. 12(1) GDPR
View original scraped data
Art. 12(1) GDPR
(2)
(3)
(4) GDPR
Art. 15(GDPR)
Art. 18(GDPR)

Original data from scraper before AI verification against source document.

Source verified 23 April 2026
articles corrected
Full Legal Summary
Detailed

The Greek DPA has imposed a fine of EUR 30,000 on Vodafone – PANAFON A.E.E.T. The controller failed to handle a data subject's requests to exercise her rights. Specifically, a data subject requested access to call recordings relating to them, but the controller only partially fulfilled this request and did so neither properly nor in a timely manner. The controller also failed to preserve certain call recordings despite a request to do so, which further undermined the data subject’s ability to exercise their rights. Furthermore, the controller provided contradictory information about the procedure for accessing the recordings.

Details

Fine Date

11 February 2026

Authority

Hellenic Data Protection Authority

Fine Amount

€30,000

Enforcement Tracker ID

ETid-1242

About this data

Data: CMS GDPR Enforcement Tracker
Licensed under CC BY-NC-SA 4.0
AI-verified and classified

Cite as: Cookie Fines. Vodafone – PANAFON A.E.E.T. - Greece (2026). Retrieved from cookiefines.eu

Report Inaccuracy

Last updated: