GDPR Fines

A public record of GDPR enforcement across Europe — compiled by INPLP members

NEW YORK COLLEGE S.A.

Country
Greece
Fine
5,000 EUR
Date
2020-06-29
Articles
Article 5, Articles 12-14

Violation of right to be informed

The complainant was contacted directly by the college through phone call, in order to be provided offers regarding educational programs for unemployed citizens. When he asked the data controller where they had gotten his data from, he received no conclusive answer. The Hellenic DPA ruled that the college had failed to meet its obligations as regards the right to be informed of the data subject, despite having collected data that should not be publicly available (unemployment status).