AADE for tolled messages: unintentional error, no risk of leakage

In the context of the 2018 road tax certificate for 89,494 debtors, who did not submit supporting documents for their exemption from costs, the notification messages, due to a technical malfunction, included names and usernames (not passwords) of other debtors.

AADE subsequently informed the Personal Data Protection Authority, as required by law.

The recipients of these messages began receiving an email from the AADE’s Directorate General for e-Government, asking them to immediately and permanently delete the messages in question from their inbox, noting that according to the General Data Protection Regulation (EU) 2016/679, it is prohibited to retain information relating to other people. Transferred and used in general.

Since the messages sent by mistake do not contain passwords (they are kept in encrypted form and cannot be recovered even by AADE), nor debt information of other debtors, who are included in these messages, there is no risk of further leakage of personal data. .

However, the General Directorate of E-Government of AADE will send instructions to interested persons to change access codes, if they wish.

It should be noted that it is highly recommended to change TAXISnet passwords frequently as a precaution to protect personal data.

In connection with the incident, AADE Governor Giorgos Pitselis ordered an urgent sworn administrative examination, to determine disciplinary responsibilities and prevent the recurrence of a similar incident in the future.

For any question related to the above, citizens can be informed through the AADE Taxpayer Service Centre: +30 213 162 1000, on working days and hours: Monday – Friday, 07:30 – 17:00.

The General Administration of Electronic Government at AADE apologizes for the incident and the inconvenience it caused to the recipients of the aforementioned messages.

Source: RES-MPE