The Greek Data Protection Authority (GDPA) has fined an employer EUR150,000 for purporting to use consent as its lawful basis for processing the personal data of employees, when in fact the processing was required for compliance with its legal obligations, and on the basis of its legitimate interest as an employer

Click here to listen to the audio.