Back to Cases
technologytelecoms · 2023
DNA Oyj
The authority found deficiencies in customer authentication and disclosure controls that risked unauthorized access to subscriber data under GDPR Articles 25 and 32.
Fine Imposed€95,000.0
Authority
Office of the Data Protection Ombudsman
Stylebalanced
Avg. investigation15 mo
Regulation
Key Takeaways
- Subscriber-service channels need strong identity verification before account disclosure.