Search Privacy Fines

Browse and filter privacy enforcement fines worldwide.

← Back to Overview

43 fines found

Total: $1.6M

DateCompanyFineRegulationAuthorityCountryTypeSummary
2021-11-12WS WiSpear Systems Ltd€925KGDPRCypriot Data Protection CommissionerCyprusNon-compliance with lawful basis for data processing
--

Articles: Art. 5 (1) a) GDPR

2019-10-25LGS Handling Ltd€70KGDPRCypriot Data Protection CommissionerCyprusNon-compliance with lawful basis for data processing
--

Articles: Art. 6 GDPR, Art. 9 GDPR

2019-10-25LGS Handling Ltd€70KGDPRCypriot Data Protection CommissionerCyprusNon-compliance with lawful basis for data processing
The national data protection authority determined that the company used the Brad...

The national data protection authority determined that the company used the Bradford factor for profiling and monitoring sick leave and that this constituted unlawful processing of personal data.

Articles: Art. 6 GDPR, Art. 9 GDPR

2021-09-06APOEL FC€40KGDPRCypriot Data Protection CommissionerCyprusFailure to implement sufficient measures to ensure information security
--

Articles: Art. 32 GDPR

2021-09-06AC Omonia€40KGDPRCypriot Data Protection CommissionerCyprusFailure to implement sufficient measures to ensure information security
--

Articles: Art. 32 GDPR

2021-09-06Hellenic Technical Enterprises Ltd.€40KGDPRCypriot Data Protection CommissionerCyprusFailure to implement sufficient measures to ensure information security
--

Articles: Art. 32 GDPR

2021-03-03Electricity Authority of Cyprus€40KGDPRCypriot Data Protection CommissionerCyprusNon-compliance with lawful basis for data processing
--

Articles: Art. 6 (1) GDPR, Art. 9 (2) GDPR

2021-03-03Hellenic Bank€25KGDPRCypriot Data Protection CommissionerCyprusNon-compliance with lawful basis for data processing
--

Articles: Art. 5 (1) e), f) GDPR, Art. 32 (1) b), c) GDPR, Art. 33 (1) GDPR

2022-01-01Bank of Cyprus Public Company Ltd.€17KGDPRCypriot Data Protection CommissionerCyprusFailure to comply with data processing principles
--

Articles: Art. 5 (1) f) GDPR, Art. 24 (1) GDPR, Art. 32 GDPR

2020-10-19Social Insurance Services of the Ministry of Labor, Welfare and Social Insurance€15KGDPRBank of Cyprus Public Company LtdCyprusNon-compliance with lawful basis for data processing
--

Articles: Art. 5 (1) f) GDPR, Art. 5 (2) GDPR, Art. 15 GDPR, Art. 32 GDPR, Art. 33 GDPR

2019-01-01Doctor€14KGDPRCypriot Data Protection CommissionerCyprusNon-compliance with lawful basis for data processing
The data controller could not provide access to personal information to a patien...

The data controller could not provide access to personal information to a patient because the dossier could not be identified. The patient complained to the Commissioner about this, and the hospital was fined 5.000 Euros.

Articles: Art. 5 GDPR, Art. 6 GDPR

2019-01-01Doctor€14KGDPRCypriot Data Protection CommissionerCyprusNon-compliance with lawful basis for data processing
--

Articles: Art. 5 GDPR, Art. 6 GDPR

2022-04-02Εκδοτικού Οίκου Δίας€10KGDPRCypriot Data Protection CommissionerCyprusFailure to comply with data processing principles
--

Articles: Art. 5 GDPR, Art. 6 GDPR

2019-03-01Newspaper€10KGDPRCypriot Data Protection CommissionerCyprusNon-compliance with lawful basis for data processing
--

Articles: Art. 6 GDPR

2019-10-25Louis Travel Ltd€10KGDPRCypriot Data Protection CommissionerCyprusNon-compliance with lawful basis for data processing
--

Articles: Art. 6 GDPR, Art. 9 GDPR

2019-10-25Louis Travel Ltd€10KGDPRCypriot Data Protection CommissionerCyprusNon-compliance with lawful basis for data processing
The national data protection authority determined that the company used the Brad...

The national data protection authority determined that the company used the Bradford factor for profiling and monitoring sick leave and that this constituted unlawful processing of personal data.

Articles: Art. 6 GDPR, Art. 9 GDPR

2021-03-03Cypriot Real Estate Registration Authority€10KGDPRCypriot Data Protection CommissionerCyprusNon-compliance with subjects' rights protection safeguards
--

Articles: Art. 12 GDPR, Art. 15 GDPR, Art. 31 GDPR, Art. 58 (1) e) GDPR

2019-03-01Newspaper€10KGDPRCypriot Data Protection CommissionerCyprusNon-compliance with lawful basis for data processing
A newspaper was fined €10,000 after it had published both in electronic and phys...

A newspaper was fined €10,000 after it had published both in electronic and physical form the names and pictures of three police investigators. The Cypriot Data Protection Commissioner considered that it would have been enough to publish only the initials of the police officers or photographs from which it would not have been possible to identify the three officials, such as using blurred faces.

Articles: Art. 6 GDPR

2023-05-02NAGA Markets Europe Ltd€9KGDPRCypriot Data Protection CommissionerCyprusFailure to comply with data processing principles
--

Articles: Art. 5 (1) f) GDPR, Art. 32 (1) b), d) GDPR

2020-01-13Government agency€9KGDPRCypriot Data Protection CommissionerCyprusFailure to implement sufficient measures to ensure information security
The government agency was fined due to granting the police access to data and fa...

The government agency was fined due to granting the police access to data and failing to implement adequate measures to secure the data, even after being warned by the national DPA.

Articles: Art. 32 GDPR

2020-01-13Government agency€9KGDPRCypriot Data Protection CommissionerCyprusFailure to implement sufficient measures to ensure information security
--

Articles: Art. 32 GDPR

2022-01-01DW Dynamic Works LIMITED€8KGDPRCypriot Data Protection CommissionerCyprusFailure to implement sufficient measures to ensure information security
--

Articles: Art. 32 GDPR

2023-01-16Πολίτης newspaper€7KGDPRCypriot Data Protection CommissionerCyprusFailure to comply with data processing principles
--

Articles: Art. 5 (1) c) GDPR, Art. 6 (1) f) GDPR

2022-01-01Hermes Airport Ltd.€6KGDPRCypriot Data Protection CommissionerCyprusFailure to implement sufficient measures to ensure information security
--

Articles: Art. 24 GDPR, Art. 32 GDPR

2020-10-22Cyprus Police€6KGDPRCypriot Data Protection CommissionerCyprusFailure to implement sufficient measures to ensure information security
--

Articles: Art. 32 GDPR

Page 1 of 2Next