Wiretapping: The Personal Data Protection Authority (PDPA) imposed a fine of 50,000 euros on Intellexa, finding that the company is unreasonably delaying delivering the data in its possession to complete the audit of the wiretapping case.
Intellexa is a company that markets and installs the illegal mobile phone spying software (Predator) – which was used in the case of Thanasis Koukakis and dozens of other politicians, journalists and other public figures in Greece.
See also: Israelis behind interception of mobile phones and WiFi at airports inGreece
The Personal Data Protection Authority has been conducting the relevant investigation into wiretapping since July 2022. Specifically, it is investigating cases of installation of monitoring software on users' mobile devices (spyware), with the aim of monitoring them without their knowledge, as well as the subsequent collection and processing of personal data. Of course, this investigation is carried out within the framework of its responsibilities as they stem from the Constitution itself.
The European Parliament's PEGA committee, which visited the country in early November, is also investigating the interceptions. On March 10, 2022, the European Parliament created the PEGA committee to investigate alleged violations of EU law in relation to the use of Pegasus and related spyware surveillance software such as Predator spyware.
See also: Predator intercepts: Intellexa continues its business undisturbed in Greece
As mentioned above, the Personal Data Protection Authority imposed a fine of 50,000 euros on Intellexa for non-cooperation.
In the context of this investigation, the Authority has initiated an administrative audit of the company Intellexa S.A. since September 2022.
An inspection team from the Authority carried out an on-site inspection at both the company's registered office in Chalandri and at the company's facility in Elliniko.
See also: Wiretapping: Will the prosecution request Predator data from Amazon?
The decision states that Intellexa unreasonably delayed responding to the Authority's questions and refused to provide information that is indisputably in its possession. This constitutes a violation of Article 31 of the General Data Protection Regulation, which requires controllers and processors to cooperate with the Authority.
Furthermore, with the same decision, the Authority orders Intellexa S.A. to immediately deliver specific information necessary for the conduct of the audit.
