Greece

Decentralised Administration of the Aegean (Αποκεντρωμένη Διοίκηση Αιγαίου)

2,000 €

GDPR enforcement action by Hellenic Data Protection Authority (HDPA) on 2026-10-06.

Rank · Sector

#364

of 391 in Public Sector and Education

Rank · Greece

#101

of 106

Rank · All fines

#2,567

of 3,223

Case details

Authority: Hellenic Data Protection Authority (HDPA)
Date: 2026-10-06
Controller / Processor: Decentralised Administration of the Aegean (Αποκεντρωμένη Διοίκηση Αιγαίου)
Sector: Public Sector and Education
Quoted Articles: Art. 5 (1) a) GDPR, Art. 6 (1) c) GDPR
Type of violation: Insufficient legal basis for data processing

Summary

The Greek DPA has imposed a fine of EUR 2,000 on the Decentralised Administration of the Aegean. The controller published 11 decisions on a transparency portal, refusing permission to a third party to drill boreholes. The wording of these decisions suggested that a representative of the applicants was responsible for the refusal. The representative then requested that their name be deleted from the published decisions, but the controller did not comply with the request. The authority held that the refusal did not have to be posted, but that the representative's name should at least have been removed.

Open original source Links to the regulator's original publication or another source.