Greece

Municipality of Moschato–Tavros

10,000 €

GDPR enforcement action by Hellenic Data Protection Authority (HDPA) on 2025-10-09.

Rank · Sector

#188

of 357 in Public Sector and Education

Rank · Greece

#51

of 93

Rank · All fines

#1,444

of 3,050

Case details

Authority: Hellenic Data Protection Authority (HDPA)
Date: 2025-10-09
Controller / Processor: Municipality of Moschato–Tavros
Sector: Public Sector and Education
Quoted Articles: Art. 5 (1) a), c), (2) GDPR, Art. 12 (1) GDPR, Art. 13 GDPR, Art. 25 (1) GDPR
Type of violation: Insufficient legal basis for data processing

Summary

The Hellenic DPA has imposed a fine of EUR 10,000 on the Municipality of Moschato–Tavros. The controller installed a video surveillance system in a depot to protect municipal vehicles. However, the controller failed to ensure, during the design phase, that the cameras only processed the necessary data. They also failed to adequately inform their employees and record the processing activities.

Open original source Links to the regulator's original publication or another source.