APOEL FC – €40,000 Fine (Cyprus, 2021)
General GDPR enforcement action
This case relates to broader data protection obligations, not specifically to cookie or consent banner compliance. It is not included in cookie statistics or the Risk Calculator.
APOEL FC was fined EUR 40,000 for not securing their ticket sales system, which led to unauthorized access to fans' personal data. This included names and ID numbers. The case shows the need for strong security practices to protect customer data.
What happened
APOEL FC's ticket sales system lacked proper security, allowing unauthorized access to personal data.
Who was affected
Fans of APOEL FC whose personal data, such as names and ID numbers, were exposed.
What the authority found
The Commissioner for Personal Data Protection found APOEL FC did not have adequate security measures in place, violating GDPR requirements.
Why this matters
This decision stresses the importance of data security for all businesses, including sports clubs. It serves as a warning that inadequate security can lead to significant fines and data breaches.
GDPR Articles Cited
The Cypriot DPA has imposed a fine of EUR 40,000 on the soccer club APOEL FC. Due to a lack of security measures in the club's ticket sales system, it was possible for an unauthorized person to access and disclose personal data of fans on the club's website. This data involved the name, the fan card number and the ID number of the data subjects. The DPA concluded that the club failed to implement adequate technical and organizational security measures. In separate proceedings, the DPA fined AC Omonia and Hellenic Technical Enterprises Ltd. for the same violations.
Related Enforcement Actions (0)
No other enforcement actions found for APOEL FC in CY
This is the only recorded action for this entity in this jurisdiction.
Details
Fine Date
6 September 2021
Authority
Commissioner for Personal Data Protection
Fine Amount
€40,000
Enforcement Tracker ID
ETid-830
About this data
Cite as: Cookie Fines. APOEL FC - Cyprus (2021). Retrieved from cookiefines.eu
Last updated: