Individuals – €150,000 Fine (Greece, 2022)

€150,000Hellenic Data Protection Authority21 July 2022Greece
final
ePrivacy
Fine

General GDPR enforcement action

This case relates to broader data protection obligations, not specifically to cookie or consent banner compliance. It is not included in cookie statistics or the Risk Calculator.

The Greek privacy authority fined Vodafone €150,000 for failing to prevent unauthorized SIM swaps, which led to personal data breaches. This case is important because it stresses the need for telecom companies to have strong security measures to protect customer data.

What happened

Vodafone allowed unauthorized SIM swaps, leading to personal data breaches.

Who was affected

Customers of Vodafone who were affected by unauthorized SIM swaps and related data breaches.

What the authority found

The Greek authority ruled that Vodafone did not have adequate security measures to prevent unauthorized access to customer data.

Why this matters

This fine highlights the critical need for telecom companies to implement robust security measures to protect against unauthorized access and data breaches. It serves as a warning to ensure compliance with privacy and security standards.

GDPR Articles Cited

AI-verified

Art. 4(1) GDPR
Art. 5(1) GDPR
View original scraped data
Art. 4 GDPR
Art. 5 GDPR
Art. 51 GDPR
Art. 55 GDPR

Original data from scraper before AI verification against source document.

National Law Articles

AI-identified

Art. 12 of Law 3471/06

Entities Involved

Individuals
Vodafone
Source verified 6 March 2026
articles corrected
national law identified
scope corrected
Full Legal Summary
Detailed

The case focused on SIM swap fraud and data breaches, not related to cookies or consent.

Violations (1)

Cookies Placed Before Consent
critical

Non-essential cookies (tracking, advertising) are placed on the user's device before obtaining valid consent.

Art. 6(1) GDPR

Related Enforcement Actions (0)

No other enforcement actions found for Individuals in GR

This is the only recorded action for this entity in this jurisdiction.

Details

Fine Date

21 July 2022

Authority

Hellenic Data Protection Authority

Fine Amount

€150,000

GDPRhub ID

gdprhub-5517

About this data

Data: GDPRhub (noyb.eu)
Licensed under CC BY-NC-SA 4.0
AI-verified and classified

Cite as: Cookie Fines. Individuals - Greece (2022). Retrieved from cookiefines.eu

Report Inaccuracy

Last updated: