Details:

Summary The Hellenic DPA has fined WIND Ελλάς Τηλεπικοινωνίες ΑΕΒΕ EUR 2,000.

A customer of the company had sent an email requesting access to the footage recorded by the store’s cameras on which they appeared.

The data subject never received a response to this request. Only when the authority asked for a response did the controller reply that the data subject’s request could not be fulfilled because the recorded material had been deleted.

The DPA considered this to be a violation of Art. 15 GDPR.

Link: link
Related articles:  Art. 15 GDPR
Type: Insufficient fulfilment of data subjects rights
Fine: EUR 2,000
Sector Media, Telecoms and Broadcasting

 

All data is based on The CMS’s Law GDPR Enforcement Tracker Source: https://www.enforcementtracker.com/

Tags: case law