Fine EUR 150,000 to multinational company in Greece for GDPR violations


The Greek Data Protection Authority has imposed a fine of 150,000 euros on PWC BS A.E. for violations of the General Data Protection Regulation. In particular, the Personal Data Protection Authority, upon a complaint, investigated on its own motion the legality of the processing of the personal data of employees of PWC BS (PRICEWATERHOUSECOOPERS BUSINESSSOLUTIONS SA) pursuant to which the abovementioned employees were forced to consent to the processing their personal data for three (3) distinct purposes.
The Authority considered PWC BS as the controller:
1) has undergone unlawful processing, in breach of the provisions of Article 5 (1) (e); a) of the GDPR (principle of legality), the personal data of its employees, as it applied an inappropriate legal basis under Art. 6 (1)  a  GDPR (consent) instead of the appropriate legal basis for the performance of the contract, compliance with a legal obligation and the superior legal interest (Art. 6 (1), b, c' and g  GDPR).
2) in an unlawful and no transparent manner, in breach of Article 5 (1) (e); (a) b and c (GDPR) (the principle of objectivity and transparency), the personal data of its employees, as it gave them the false impression that they processed it in accordance with the legal basis of their consent in accordance to 6 (1) a’GDPR.In practice, it was processed on another legal basis, for which the employees were never informed.
3) as controller, although he was responsible, was unable to comply with and demonstrate compliance with Article 5 (1) of the GDPR in breach of the principle of accountability provided for in Article 5 (2) and he carried the burden of compliance on employees.

Comments

Post a Comment

Popular posts from this blog

European Commission refers Poland to the Court of Justice to protect judges from political control

Image
European Commission decided to refer Poland to the Court of Justice of the EU regarding the new disciplinary regime for Polish judges, requesting an expedited procedure. On 3 April 2019, the Commission launched this infringement procedure on the grounds that the new disciplinary regime undermines the judicial independence of Polish judges and does not ensure the necessary guarantees to protect judges from political control, as required by the Court of Justice of the EU. Specifically, the Polish law allows ordinary court judges to be subjected to disciplinary investigations, procedures and sanctions on the basis of the content of their judicial decisions, including the exercise of their right under Article 267 of the Treaty on the Functioning of the European Union (TFEU) to request preliminary rulings from the Court of Justice of the EU. Moreover, the new disciplinary regime does not guarantee the independence and impartiality of the Disciplinary Chamber of the Supreme Co...
Read more

The Delivery Delay Clause in Residential Construction Contracts: Consumer Protection in Cyprus and Europe

Image
By Giorgos Kazoleas, LL.M., Lawyer, Managing Partner at Legal Experts Cyprus The purchase or construction of a new residence is one of the most significant financial and personal decisions a consumer can make. Residential construction contracts or agreements for the sale of property under construction are a crucial and defining element of the entire process, as certain terms they may contain can be detrimental to the buyer. One of the most critical aspects is the contractual delivery time of the project and the provision for delay, through the so-called delivery delay clause. The Delivery Delay Clause: Its Role and Legal Nature The delivery delay clause (also known as a penalty clause in the event of default) is a term usually included in the contract that specifies a predetermined compensation amount that the contractor or seller must pay to the buyer for every day, week, or month of delay beyond the agreed delivery date. The purpose of the clause is twofold: -Compensatory: ...
Read more

Unfair and illegal terms of loan agreements used by banks

Image
Article by George Kazoleas,  Lawyer LL.M. (Banking & Capitalmarkets Law) It is well known that loan agreements contain terms and conditions that disturb the balance between the parties to the detriment of the borrower and are therefore legally and judicially  diagnosed as contrary to law. Despite this, most banks insist on including them in their new contracts, refusing to comply with court rulings even by the European Court of Justice. Especially, foreign currency loan agreements (such as the Swiss franc) contain many unfair and opaque terms. Particularly: The Bank had to inform the potential borrower of the foreign exchange risk and explain in detail the relevant clauses before concluding the loan. It is very common, that the loan agreement does not mention anything about this risk, nor does it appear that the borrower has been effectively and properly informed by a competent bank official. According to Cypriot and European legislation and case law, the loan...
Read more

Continued preventive detention of convicted paedophile in view of risk of reoffending did not breach Convention but Administrative Court ought to have held hearing in his case (ECtHR)

Image
The case of B.M. v. Switzerland (application no. 50227/21) concerned the rejection of the application for release on licence made by the applicant, a paedophile who had been in preventive detention since 2005 following his conviction for sexual assault of minors, and the Administrative Court’s failure to hold a hearing in his case. In Chamber's judgment dated 12.5.2026, the European Court of Human Rights held, unanimously, that there had been no violation of Article 5 § 1 (right to liberty and security) of the European Convention on Human Rights. The Court found, in particular, that the Federal Supreme Court had adopted an approach consistent with the principles set out in its case-law on the justification for deprivation of liberty under paragraph 1 (a) of Article 5 of the Convention when it had held that the legal interests at stake were of high importance because they involved the physical and mental well-being of children, who were vulnerable individuals. The continuation of th...
Read more

Legislative Proposal on Mutual Admissibility of Evidence and Electronic Evidence in Criminal Proceedings in the EU by European Law Institute

Image
The  European Law Institute (ELI) Legislative Proposal provides guidance on future EU legislative action in the field. It aims at harmonising approaches in EU Member States and, through it, enhancing the principle of mutual recognition in criminal matters and the protection of human rights of suspects and accused. At present, each EU Member State follows its own rules on criminal investigative measures for evidence gathering, resulting in different standards for its admissibility. When such evidence, including electronic evidence, is to be shared with other EU Member States, a clear mechanism governing its admissibility is needed. While there have already been a number of helpful studies on the admissibility of evidence in criminal proceedings and the need for more harmonisation at EU level as well as important advances in European judicial cooperation, these initiatives have so far not comprehensively addressed the rules that should be adopted regarding the mutual admissibilit...
Read more

Removal of a mother’s parental authority and adoption of her eldest son by foster parents: Violation of the right to respect for private and family life (ECHR)

Image
In Εuropean Court of Human Rights Grand Chamber judgment in the case of Strand Lobben and Others v. Norway (application no. 37283/13) the ECHR held, by 13 votes to four, that there had been a violation of Article 8 (right to respect for private and family life) of the European Convention on Human Rights in respect of both applicants, a mother and her son. The case concerned the domestic authorities’ decision to remove a mother’s parental authority and let foster parents adopt her son. The Court found in particular that the main reason for the authorities’ actions had been the mother’s inability to care properly for her son, in particular in view of his special needs as a vulnerable child. However, that reasoning had been based on limited evidence as the contact sessions between mother and son after his placement in foster care had been few and far between and the psychologists’ reports out-dated. In addition, a review of his vulnerability had contained barely any analysis and no e...
Read more