AC Omonia – €40,000 Fine (Cyprus, 2021)

€40,000Commissioner for Personal Data Protection6 September 2021Cyprus
final
Fine

General GDPR enforcement action

This case relates to broader data protection obligations, not specifically to cookie or consent banner compliance. It is not included in cookie statistics or the Risk Calculator.

AC Omonia was fined EUR 40,000 for not securing their ticket sales system properly. This allowed unauthorized access to fans' personal data, including names and ID numbers. The case highlights the importance of strong security measures to protect customer information.

What happened

AC Omonia's ticket sales system lacked security, allowing unauthorized access to personal data.

Who was affected

Fans of AC Omonia whose personal data, like names and ID numbers, were exposed.

What the authority found

The Commissioner for Personal Data Protection found AC Omonia failed to implement adequate security measures as required by GDPR.

Why this matters

This case underscores the need for businesses to prioritize data security to avoid breaches and fines. It serves as a reminder that even sports clubs must comply with GDPR standards.

GDPR Articles Cited

Art. 32 GDPR
Full Legal Summary
Detailed

The Cypriot DPA has imposed a fine of EUR 40,000 on the soccer club AC Omonia. Due to a lack of security measures in the club's ticket sales system, it was possible for an unauthorized person to access and disclose personal data of fans on the club's website. This data involved the name, the fan card number and the ID number of the data subjects. The DPA concluded that the club failed to implement adequate technical and organizational security measures. In separate proceedings, the DPA fined APOEL FC and Hellenic Technical Enterprises Ltd. for the same violations.

Related Enforcement Actions (0)

No other enforcement actions found for AC Omonia in CY

This is the only recorded action for this entity in this jurisdiction.

Details

Fine Date

6 September 2021

Authority

Commissioner for Personal Data Protection

Fine Amount

€40,000

Enforcement Tracker ID

ETid-831

About this data

Data: CMS GDPR Enforcement Tracker
Licensed under CC BY-NC-SA 4.0
AI-verified and classified

Cite as: Cookie Fines. AC Omonia - Cyprus (2021). Retrieved from cookiefines.eu

Report Inaccuracy

Last updated: