Cyprus

KEPIDES

6,000 €

GDPR enforcement action by Cypriot Data Protection Commissioner on 2021-03-03.

Rank · Sector

#23

of 86 in Real Estate

Rank · Cyprus

#26

of 47

Rank · All fines

#1,602

of 3,042

Case details

Authority: Cypriot Data Protection Commissioner
Date: 2021-03-03
Controller / Processor: KEPIDES
Sector: Real Estate
Quoted Articles: Art. 32 (4)
Type of violation: Insufficient technical and organisational measures to ensure information security

Summary

The Cypriot DPA imposed a fine of EUR 6,000 against KEPIDES (real estate company). The controller had submitted a list of buyers of the properties it manages to a parliamentary committee. However, the controller had failed to anonymize the list, as a result of which the names of the data subjects were transmitted.

Open original source Links to the regulator's original publication or another source.