Greece

I Mathisi

6,000 €

GDPR enforcement action by Hellenic Data Protection Authority (HDPA) on 2025-12-31.

Rank · Sector

#220

of 356 in Public Sector and Education

Rank · Greece

#61

of 93

Rank · All fines

#1,652

of 3,039

Case details

Authority: Hellenic Data Protection Authority (HDPA)
Date: 2025-12-31
Controller / Processor: I Mathisi
Sector: Public Sector and Education
Quoted Articles: Art. 12 (3), (4) GDPR, Art. 15 (1) GDPR, Art. 31 GDPR
Type of violation: Insufficient fulfilment of data subjects rights

Summary

The Greek DPA has imposed a fine of EUR 6,000 on I Mathisi. The controller, a school, failed to adequately respond to a request to exercise the data subjects' rights filed by the father of two pupils. The school was fined EUR 2,000 for this failure. The controller also failed to cooperate with the DPA on a systematic basis, which seriously hindered the DPA's work and strained its resources. For this, it was fined an additional EUR 4,000.

Open original source Links to the regulator's original publication or another source.