Recent GDPR Fines Issued in Various Countries
Country: Greece (first fine ever issued by the Greek data protection authority)Fine Amount: €150,000Issued to: PWC Business SolutionsReason: The company, i.e. an employer, had decided to use consent as a legal basis for processing the personal data of its employees for various standard work-related purposes (e.g. paying the employees, sending the employees' personal data to relevant tax and labour authorities etc.). The Greek data protection authority held that consent is not a sound legal basis in the context of employment, due to the relationship between employer and employee being a subordinate one where there is a natural imbalance of power.Country:…
MamoTCV Advocates22nd August 2019