Greece's Hellenic Data Protection Authority fined Hellenic Petroleum 30,000 euros for data protection law violations, according to a post from Hunton Andrews Kurth's Privacy & Information Security Law Blog. The DPA found the vendor it hired to conduct an online study processed data without a legal basis and without the agency’s permission. As a data controller, Hellenic Petroleum was responsible for the vendor’s processing activities, the DPA determined. The decision was made in accordance with data protection laws prior to the implementation of the EU General Data Protection Regulation.
Full Story