Enforcing jurisdiction
Cyprus · Geography does not establish applicable law.
Confirmed applicable legislation
Privacy topics

Cyprus Police – €6,000 Fine (Cyprus, 2020)

€6,000Commissioner for Personal Data Protection22 October 2020Cyprus
final
Fine

Privacy enforcement record

This record is classified outside cookie consent. Subject classification does not confirm an applicable law. It is not included in cookie statistics or the Risk Calculator.

The Cyprus Police was fined for failing to protect personal data in a vehicle owner database. An officer accessed this data without permission and shared it with a third party. This case shows the need for strong data protection measures in public institutions.

What happened

A police officer accessed a database of vehicle owners without authorization and shared information from it with a third party.

Who was affected

Vehicle owners whose personal data was accessed without authorization by a police officer.

What the authority found

The Commissioner for Personal Data Protection found that the Cyprus Police did not have sufficient measures in place to prevent unauthorized access to personal data.

Why this matters

This case highlights the importance of data protection in public sectors. Organizations must implement strong safeguards to protect personal information from unauthorized access.

Recorded legal citations
Automatically processed
Art. 32 GDPR
View original scraped data
Art. 32(GDPR)

Original imported citations before automated processing; the processing history does not establish independent verification.

Source checks

Linked-source text retrieved.

Automated check recorded — 14 March 2026.

No issues were reported by that automated check.

Retrieved text may be a secondary summary or an announcement. These automated statuses do not establish that the original decision was read or that the record received an independent legal review. How we check sources

Full Legal Summary
Detailed

A police officer had unauthorized access to a database holding personal data about vehicle owners and used the database for non-official purposes to pass information from the database to a third party. In this respect, the organizational and technical measures taken by the police to prevent unauthorized access to the database were insufficient to prevent the unauthorized disclosure of personal data to third parties.

Details

Fine Date

22 October 2020

Authority

Commissioner for Personal Data Protection

Fine Amount

€6,000

Enforcement Tracker ID

ETid-432

About this data

Data: CMS GDPR Enforcement Tracker
Licensed under CC BY-NC-SA 4.0
Automatically normalized and classified

Cite as: Cookie Fines. Cyprus Police - Cyprus (2020). Retrieved from cookiefines.eu

Report Inaccuracy

Last updated: