Debt Management Company fined €20,000 for unlawful processing of personal data

Greece’s data protection supervisory authority (HDPA) has fined a debt management company, following a complaint from a data subject. The complaint concerned continuous telephone calls to a debtor who had been judicially discharged from a debt. The debt collection company was aware of this and, moreover, failed to comply with the complainant’s objection to the processing of his personal data and his request to delete his personal data. The HDPA found that the company had wrongly cast doubt on the complainant’s identity, had failed to exercise his rights and had processed his personal data unjustifiably.