Cyprus Police – €6,000 Fine (Cyprus, 2020)
General GDPR enforcement action
This case relates to broader data protection obligations, not specifically to cookie or consent banner compliance. It is not included in cookie statistics or the Risk Calculator.
The Cyprus Police faced a fine for mishandling personal data, as one of its officers shared sensitive information with an unauthorized person. This incident is concerning because it shows how easily personal data can be misused, especially by those in trusted positions. It emphasizes the need for stronger oversight and security measures in handling personal data.
What happened
A Cyprus Police officer improperly accessed and shared personal data from a database with a retired officer.
Who was affected
Individuals whose personal data was accessed and shared without authorization by the Cyprus Police.
What the authority found
The authority determined that the Cyprus Police did not have effective measures in place to prevent unauthorized access to personal data.
Why this matters
This ruling highlights the importance of having strong internal controls to protect personal data. Other organizations should ensure their data handling practices are secure to prevent similar breaches.
View original scraped data
Original imported citations before automated processing; the processing history does not establish independent verification.
Source checks
Linked-source text retrieved.
Automated check recorded — 14 March 2026.
No issues were reported by that automated check.
Retrieved text may be a secondary summary or an announcement. These automated statuses do not establish that the original decision was read or that the record received an independent legal review. How we check sources
A police officer had unauthorized access to a database holding personal data about vehicle owners and used the database for non-official purposes to pass information from the database to a third party. In this respect, the organizational and technical measures taken by the police to prevent unauthorized access to the database were insufficient to prevent the unauthorized disclosure of personal data to third parties.
Violations (1)
Third-party tracking cookies or scripts are loaded without obtaining prior user consent.
Art. 13, 14 GDPR
Related Enforcement Actions (1)
Other enforcement actions involving Cyprus Police in CY
Similar Cases
Enforcement actions with similar violations
Details
Fine Date
22 October 2020
Authority
Commissioner for Personal Data Protection
Fine Amount
€6,000
Enforcement Tracker ID
ETid-432
About this data
Cite as: Cookie Fines. Cyprus Police - Cyprus (2020). Retrieved from cookiefines.eu
Last updated: