Cyprus Police – €6,000 Fine (Cyprus, 2020)
General GDPR enforcement action
This case relates to broader data protection obligations, not specifically to cookie or consent banner compliance. It is not included in cookie statistics or the Risk Calculator.
The Cyprus Police faced a fine for mishandling personal data, as one of its officers shared sensitive information with an unauthorized person. This incident is concerning because it shows how easily personal data can be misused, especially by those in trusted positions. It emphasizes the need for stronger oversight and security measures in handling personal data.
What happened
A Cyprus Police officer improperly accessed and shared personal data from a database with a retired officer.
Who was affected
Individuals whose personal data was accessed and shared without authorization by the Cyprus Police.
What the authority found
The authority determined that the Cyprus Police did not have effective measures in place to prevent unauthorized access to personal data.
Why this matters
This ruling highlights the importance of having strong internal controls to protect personal data. Other organizations should ensure their data handling practices are secure to prevent similar breaches.
GDPR Articles Cited
View original scraped data
Original data from scraper before AI verification against source document.
A police officer had unauthorized access to a database holding personal data about vehicle owners and used the database for non-official purposes to pass information from the database to a third party. In this respect, the organizational and technical measures taken by the police to prevent unauthorized access to the database were insufficient to prevent the unauthorized disclosure of personal data to third parties.
Violations (1)
Third-party tracking cookies or scripts are loaded without obtaining prior user consent.
Art. 13, 14 GDPR
Related Enforcement Actions (1)
Other enforcement actions involving Cyprus Police in CY
Similar Cases
Enforcement actions with similar violations
Details
Fine Date
22 October 2020
Authority
Commissioner for Personal Data Protection
Fine Amount
€6,000
Enforcement Tracker ID
ETid-432
About this data
Cite as: Cookie Fines. Cyprus Police - Cyprus (2020). Retrieved from cookiefines.eu
Last updated: