Fine EUR 150,000 to multinational company in Greece for GDPR violations


The Greek Data Protection Authority has imposed a fine of 150,000 euros on PWC BS A.E. for violations of the General Data Protection Regulation. In particular, the Personal Data Protection Authority, upon a complaint, investigated on its own motion the legality of the processing of the personal data of employees of PWC BS (PRICEWATERHOUSECOOPERS BUSINESSSOLUTIONS SA) pursuant to which the abovementioned employees were forced to consent to the processing their personal data for three (3) distinct purposes.
The Authority considered PWC BS as the controller:
1) has undergone unlawful processing, in breach of the provisions of Article 5 (1) (e); a) of the GDPR (principle of legality), the personal data of its employees, as it applied an inappropriate legal basis under Art. 6 (1)  a  GDPR (consent) instead of the appropriate legal basis for the performance of the contract, compliance with a legal obligation and the superior legal interest (Art. 6 (1), b, c' and g  GDPR).
2) in an unlawful and no transparent manner, in breach of Article 5 (1) (e); (a) b and c (GDPR) (the principle of objectivity and transparency), the personal data of its employees, as it gave them the false impression that they processed it in accordance with the legal basis of their consent in accordance to 6 (1) a’GDPR.In practice, it was processed on another legal basis, for which the employees were never informed.
3) as controller, although he was responsible, was unable to comply with and demonstrate compliance with Article 5 (1) of the GDPR in breach of the principle of accountability provided for in Article 5 (2) and he carried the burden of compliance on employees.

Comments

Post a Comment

Popular posts from this blog

Greek Administrative Court rules state liable for Covid-19 vaccine side effects due to "excessive sacrifice"

Image
Greece: The Administrative Court of First Instance of Athens, in its decision no. 4202/2025, has ruled that the Greek State is liable for damages sustained by an individual due to side effects following a preventive "COVID-19" vaccination. This landmark decision was issued in a compensation lawsuit filed against the Hellenic Republic. The Case: Seeking Compensation for Vaccine-Related Harm The lawsuit was brought by a plaintiff seeking compensation for material damage and moral harm (non-pecuniary damage), alleging that they suffered severe side effects after their preventive COVID-19 vaccination with a specific vaccine. The initial claim was for €461,835.26, but this amount was subsequently restricted during the proceedings. The plaintiff based their claim on two legal grounds: Article 105 of the Introductory Law of the Civil Code (EισNAK): This article concerns the State's liability for compensation arising from illegal acts or omissions of its organs in the exe...
Read more

A holding by purely financial investors in a law firm may be prohibited (CJEU)

Image
The EU Court of Justice ruled in Case C-295/23 (Halmer Rechtsanwaltsgesellschaft) that a holding by purely financial investors in a law firm may be prohibited. Such a prohibition is justified in order to ensure the independence of lawyers.  A Member State may prohibit holdings by purely financial investors in the capital of a law firm. Such a restriction on the freedom of establishment and the free movement of capital is justified by the objective of ensuring that lawyers can exercise their profession independently and in compliance with their professional conduct obligations.  The German law firm Halmer Rechtsanwaltsgesellschaft is challenging before the Higher Bavarian Lawyers’ Court (Germany) a decision of the Munich Bar Association of 9 November 2021 which revoked its registration with the bar association on account of the fact that an Austrian limited liability company acquired shares [1] in it for purely financial purposes. Under the German legislation applicable at the ...
Read more

European Commission refers Poland to the Court of Justice to protect judges from political control

Image
European Commission decided to refer Poland to the Court of Justice of the EU regarding the new disciplinary regime for Polish judges, requesting an expedited procedure. On 3 April 2019, the Commission launched this infringement procedure on the grounds that the new disciplinary regime undermines the judicial independence of Polish judges and does not ensure the necessary guarantees to protect judges from political control, as required by the Court of Justice of the EU. Specifically, the Polish law allows ordinary court judges to be subjected to disciplinary investigations, procedures and sanctions on the basis of the content of their judicial decisions, including the exercise of their right under Article 267 of the Treaty on the Functioning of the European Union (TFEU) to request preliminary rulings from the Court of Justice of the EU. Moreover, the new disciplinary regime does not guarantee the independence and impartiality of the Disciplinary Chamber of the Supreme Co...
Read more

Ombudsman inquiry on Commission President’s text messages is a wake-up call for EU

Image
The European Ombudsman inquiry into the Commission’s handling of a request for text messages between its President and the CEO of a pharmaceutical company is a wake-up call for all EU institutions about ensuring accountability in an era of instant messaging. One year after the initial request by a journalist, the Commission has still not clarified whether messages reported to concern major vaccine procurement deals exist and whether the public is entitled to see them. The Ombudsman had asked the Commission, in a finding of maladministration in January, to conduct a more thorough search for the text messages. The Commission’s recent response failed to say whether it had looked directly and correctly for the text messages and if not, why not. While the response recognised that work-related text messages can be EU documents, it reiterated that the Commission’s internal policy is, in effect, not to register text messages. The Ombudsman has closed  the inquiry  and upheld...
Read more

Removal of a mother’s parental authority and adoption of her eldest son by foster parents: Violation of the right to respect for private and family life (ECHR)

Image
In Εuropean Court of Human Rights Grand Chamber judgment in the case of Strand Lobben and Others v. Norway (application no. 37283/13) the ECHR held, by 13 votes to four, that there had been a violation of Article 8 (right to respect for private and family life) of the European Convention on Human Rights in respect of both applicants, a mother and her son. The case concerned the domestic authorities’ decision to remove a mother’s parental authority and let foster parents adopt her son. The Court found in particular that the main reason for the authorities’ actions had been the mother’s inability to care properly for her son, in particular in view of his special needs as a vulnerable child. However, that reasoning had been based on limited evidence as the contact sessions between mother and son after his placement in foster care had been few and far between and the psychologists’ reports out-dated. In addition, a review of his vulnerability had contained barely any analysis and no e...
Read more

International Criminal Court removes Prosecutor Karim Khan over serious misconduct

Image
International Criminal Court member states voted to dismiss prosecutor Karim Khan following disputed allegations that he sexually assaulted a female member of his staff. The Assembly of States Parties to the Rome Statute of the International Criminal Court held a special session on disciplinary proceedings involving an elected official on 24 July 2026 at United Nations Headquarters in New York. The Assembly adopted a decision, by secret ballot, by an absolute majority of 82 States Parties, finding that Mr. Karim Khan committed serious misconduct and serious breach of duty and removed him from office under article 46 of the Rome Statute. Following the decision, Deputy Prosecutors Nazhat Shameen Khan and Mame Mandiaye Niang, will continue to head the Office of the Prosecutor (the Office). Since Mr Karim A. A. Khan took a leave of absence in May 2025,  the Deputy Prosecutors have assumed responsibility for the leadership, management and administration of...
Read more

Motor vehicle liability insurance: EU law does not preclude the transfer of a claim for compensation held against an insurance company (CJEU)

Image
Motor vehicle liability insurance: EU law does not preclude the transfer of a claim for compensation held against an insurance company (Judgment of the Court of Justice of EU in Case C-277/25- Helpfind Funding and Others). In Poland, several people whose vehicles had been damaged in road traffic accidents received compensation from the insurance undertakings of the persons responsible for those accidents. They took the view that the sums that they had received did not fully remedy their material damage, and therefore assigned their compensation claims to companies specialising in debt recovery, in return for payment. [1] Those professionals then brought legal proceedings against the insurers concerned. The Polish court seised of those disputes referred the matter to the Court of Justice to enquire whether the EU Motor Insurance Directive [2] prevents such an assignment of the right to compensation.  The Court answers that question in the negative. It notes that the directive aims t...
Read more