- Enforcing jurisdiction
- Greece · Geography does not establish applicable law.
- Confirmed applicable legislation
- Privacy topics
PWC Business Solutions – €150,000 Fine (Greece, 2019)
Privacy enforcement record
This record is classified outside cookie consent. Subject classification does not confirm an applicable law. It is not included in cookie statistics or the Risk Calculator.
PWC Business Solutions was fined for misleading employees about how their personal data was being used. This is significant because it shows that companies must be transparent about their data practices.
What happened
The company incorrectly claimed that it was processing employee data based on consent when it was actually using a different legal basis.
Who was affected
Employees of PWC Business Solutions who were misled about their data processing were affected.
What the authority found
The authority found that the company violated transparency rules by not properly informing employees about how their data was processed.
Why this matters
This case emphasizes the need for companies to be clear and honest about their data handling practices. Transparency is key to building trust with employees and customers.
View original scraped data
Original imported citations before automated processing; the processing history does not establish independent verification.
Source checks
Secondary-source text retrieved.
Automated check recorded — 6 March 2026.
No issues were reported by that automated check.
Retrieved text may be a secondary summary or an announcement. These automated statuses do not establish that the original decision was read or that the record received an independent legal review. How we check sources
The processing of employee personal data was based on consent. The HDPA found that consent as legal basis was inappropriate, as the processing of personal data was intended to carry out acts directly linked to the performance of employment contracts, compliance with a legal obligation to which the controller is subject and the smooth and effective operation of the company, as its legitimate interest. In addition, the company gave employees the false impression that it was processing their personal data under the legal basis of consent, while in reality it was processing their data under a different legal basis. This was in violation of the principle of transparency and thus in breach of the obligation to provide information under Articles 13(1)(c) and 14(1)(c) of the GDPR. Lastly, in violation of the accountability principle, the company failed to provide the HDPA with evidence that it had carried out a prior assessment of the appropriate legal bases for processing employee personal data
Related Enforcement Actions (0)
No other enforcement actions found for PWC Business Solutions in GR
This is the only recorded action for this entity in this jurisdiction.
Details
Fine Date
30 July 2019
Authority
Hellenic Data Protection Authority
Fine Amount
€150,000
About this data
Cite as: Cookie Fines. PWC Business Solutions - Greece (2019). Retrieved from cookiefines.eu
Last updated: