English School staff union (ESSA) – €5,000 Fine (Cyprus, 2022)

€5,000Commissioner for Personal Data Protection21 March 2022Cyprus
final
Fine

General GDPR enforcement action

This case relates to broader data protection obligations, not specifically to cookie or consent banner compliance. It is not included in cookie statistics or the Risk Calculator.

The English School staff union in Cyprus was fined EUR 5,000 for not protecting personal data properly. A teacher used parents' email addresses for a different purpose than intended, leading to a data breach. This case shows the need for strong data protection measures to prevent unauthorized use.

What happened

A teacher at the English School used parents' email addresses for an unauthorized purpose, leading to a data breach.

Who was affected

Parents of students at the English School were affected by the misuse of their email addresses.

What the authority found

The Cypriot DPA fined the English School staff union for failing to implement adequate data protection measures, violating GDPR.

Why this matters

This case underscores the importance of implementing robust technical and organizational measures to protect personal data. Organizations should ensure data is used only for its intended purpose to prevent breaches.

GDPR Articles Cited

Art. 32 GDPR
Full Legal Summary
Detailed

The Cypriot DPA has imposed a fine of EUR 5,000 on the English School staff union (ESSA). The school had notified the DPA of a data breach under Art. 33 GDPR. A teacher, also a member of the staff union, had used the email addresses of the parents of the students for a purpose other than the one for which the email addresses had originally been collected. The DPA found that the staff union had failed to take appropriate technical and organizational measures to ensure the protection of personal data and to prevent such incidents.

Related Enforcement Actions (0)

No other enforcement actions found for English School staff union (ESSA) in CY

This is the only recorded action for this entity in this jurisdiction.

Details

Fine Date

21 March 2022

Authority

Commissioner for Personal Data Protection

Fine Amount

€5,000

Enforcement Tracker ID

ETid-1109

About this data

Data: CMS GDPR Enforcement Tracker
Licensed under CC BY-NC-SA 4.0
AI-verified and classified

Cite as: Cookie Fines. English School staff union (ESSA) - Cyprus (2022). Retrieved from cookiefines.eu

Report Inaccuracy

Last updated: