Greece

Shield of David - K.I.D.A.F.

10,000 €

GDPR enforcement action by Hellenic Data Protection Authority (HDPA) on 2025-06-24.

Rank · Sector

#144

of 270 in Health Care

Rank · Greece

#50

of 93

Rank · All fines

#1,436

of 3,050

Case details

Authority: Hellenic Data Protection Authority (HDPA)
Date: 2025-06-24
Controller / Processor: Shield of David - K.I.D.A.F.
Sector: Health Care
Quoted Articles: Art. 5 GDPR, Art. 12 GDPR, Art. 13 GDPR, Art. 15 GDPR, Art. 24 GDPR, Art. 31 GDPR
Type of violation: Non-compliance with general data processing principles

Summary

The Hellenic DPA has imposed a fine of EUR 10,000 on Shield of David - K.I.D.A.F. The controller, a day care centre for people with autism, has legally installed video surveillance on its premises. However, the controller failed to adequately respond to a data subject's request to exercise their rights. Furthermore, the controller forwarded data to third entities without notifying the data subject. Lastly, the controller failed to cooperate adequately with the DPA.

Open original source Links to the regulator's original publication or another source.