Greece

Headquarter of a Fire Brigade

10,000 €

GDPR enforcement action by Hellenic Data Protection Authority (HDPA) on 2026-01-08.

Rank · Sector

#96

of 213 in Employment

Rank · Greece

#52

of 93

Rank · All fines

#1,446

of 3,050

Case details

Authority: Hellenic Data Protection Authority (HDPA)
Date: 2026-01-08
Controller / Processor: Headquarter of a Fire Brigade
Sector: Employment
Quoted Articles: Art. 5 (1) a ), c) GDPR
Type of violation: Insufficient legal basis for data processing

Summary

The Greek DPA has imposed a fine of EUR 10,000 on a Fire Brigade Head Quarter. The controller had stored health data of an employee which had been in relation with her sick leave. The controller stored every detail of the medical condition, treatment and other related data. The ammount of data processed had not been necessary for the purpose and therefore no legal basis.

Open original source Links to the regulator's original publication or another source.