Cyprus

Bank of Cyprus Public Company Limited

25,000 €

GDPR enforcement action by Cypriot Data Protection Commissioner on 2025-08-05.

Rank · Sector

#150

of 322 in Finance, Insurance and Consulting

Rank · Cyprus

of 47

Rank · All fines

#983

of 3,050

Case details

Authority: Cypriot Data Protection Commissioner
Date: 2025-08-05
Controller / Processor: Bank of Cyprus Public Company Limited
Sector: Finance, Insurance and Consulting
Quoted Articles: Art. 5 (1) f) GDPR, Art. 24 GDPR, Art. 32 GDPR
Type of violation: Insufficient technical and organisational measures to ensure information security

Summary

The Cypriot DPA has imposed a fine of EUR 25,000 on the Bank of Cyprus Public Company Limited. The controller failed to implement adequate technical and organisational measures to ensure data security, resulting in a data breach.

Open original source Links to the regulator's original publication or another source.