GDPR Fines

A public record of GDPR enforcement across Europe — compiled by INPLP members

Altius Insurance Ltd

Country
Cyprus
Fine
4,000 EUR
Date
2019-03-13
Sector
Insurance Company
Articles
Article 6(1)(a) of the GDPR

Unauthorised SMS advertising material sent to non-customers.

The DPA received 8 complaints from people claiming to have received SMS messages from Altius Insurance Ltd. without their consent and without prior business relationship with the insurance company. The company reported that the phone numbers used for the broadcast were randomly generated by a software tool. The Commissioner for Personal Data Protection has pointed out that the telephone numbers, even if randomly selected, constitute personal data as soon as their telephone number holder is easily identifiable. Authoriy: Office of the Commissioner for Personal Data Protection Cyprus