- Enforcing jurisdiction
- Cyprus · Geography does not establish applicable law.
- Confirmed applicable legislation
- Privacy topics
Housing Finance Corporation – €10,000 Fine (Cyprus, 2025)
Privacy enforcement record
This record is classified outside cookie consent. Subject classification does not confirm an applicable law. It is not included in cookie statistics or the Risk Calculator.
Housing Finance Corporation was fined for improperly handling a loan application, which included outdated and incorrect data. The case illustrates the importance of maintaining accurate records and following data retention policies. This ruling serves as a reminder for financial institutions to ensure their data practices are compliant.
What happened
Housing Finance Corporation rejected a loan application based on outdated information about a previous loan.
Who was affected
A customer who applied for a loan and was affected by the incorrect data retention.
What the authority found
The data protection authority found that the corporation violated GDPR by retaining inaccurate data beyond the allowed period.
Why this matters
This ruling stresses the need for organizations to regularly review and update their data retention practices. Companies must ensure they do not keep outdated information that could harm their customers.
View original scraped data
Original imported citations before automated processing; the processing history does not establish independent verification.
Source checks
Secondary-source text retrieved.
Automated check recorded — 14 March 2026.
No issues were reported by that automated check.
Retrieved text may be a secondary summary or an announcement. These automated statuses do not establish that the original decision was read or that the record received an independent legal review. How we check sources
The controller is ‘Housing Finance Corporation’ (Οργανισμός Χρηματοδοτήσεως Στέγης), a bank specialised in the provision of long-term loans relating to housing, education, and health. In 2023, the data subject filed an application to the controller for a loan (third loan). The data subject was informed by letter that his application had been rejected due to a non-performing loan he had received several years ago (first loan). The letter also mentioned that, according to the controller’s system, a previous loan application dated in 2020 that had been rejected for the same reason (second loan). The data subject filed a complaint before the DPA (Commissioner for Personal Data Protection). He stated that he had settled the alleged non-performing loan in 2020, as demonstrated from the database of the credit information agency ‘Artemis’. This loan should not have been included in the data maintained by the controller. He also claimed that the data about the second loan application shouldn’t have been retained for more that 6 months, as described in the controller’s privacy policy. The controller informed the DPA that, with regard to the electronic registration of applications and the process of deleting information and electronic attachments, there was no automated setting in the system and, in such cases, any action had to be performed by an official who had access to the application system for each document/item individually. It maintained that the serious shortage of human resources made this task more difficult. It also claimed that this created a time-consuming process that was prone to human error. Regarding the retention of the data about the rejection of the second loan application, the controller claimed that it did not keep the data, instead, the members of its credits committee remembered this information and took it into consideration for the rejection of the third loan application. Finally, it claimed that a reference to the rejection of the second loan a
Related Enforcement Actions (0)
No other enforcement actions found for Housing Finance Corporation in CY
This is the only recorded action for this entity in this jurisdiction.
Details
Fine Date
10 March 2025
Authority
DPA Commissioner
Fine Amount
€10,000
About this data
Cite as: Cookie Fines. Housing Finance Corporation - Cyprus (2025). Retrieved from cookiefines.eu
Last updated: