Εκδοτικού Οίκου Δίας
GDPR enforcement action by Cypriot Data Protection Commissioner on 2022-02-04.
Case details
- Authority
- Cypriot Data Protection Commissioner
- Date
- 2022-02-04
- Controller / Processor
- Εκδοτικού Οίκου Δίας
- Sector
- Media, Telecoms and Broadcasting
- Quoted Articles
- Art. 5 GDPR, Art. 6 GDPR
- Type of violation
- Insufficient legal basis for data processing
Summary
The Cypriot DPA has imposed a fine of EUR 10,000 on the publisher Εκδοτικού Οίκου Δίας. A public figure had filed a complaint with the DPA. The publisher had published incorrect information about the data subject's financial situation on a website. In the course of its investigation, the DPA, weighing the publisher's right to freedom of expression against the data subject's right to privacy and protection of personal data, found that the publisher had unlawfully processed the data of the data subject.
---UPDATE---
The controller appealed against the decision to the Administrative Court, which dismissed the appeal and upheld the DPA's decision.