- Enforcing jurisdiction
- Greece · Geography does not establish applicable law.
- Confirmed applicable legislation
- Privacy topics
Piraeus Bank – €10,000 Fine (Greece, 2022)
Privacy enforcement record
This record is classified outside cookie consent. Subject classification does not confirm an applicable law. It is not included in cookie statistics or the Risk Calculator.
Piraeus Bank was fined EUR 10,000 for mistakenly sending a document with personal data to the wrong person. The bank failed to stop the communications even after realizing the mistake. This case highlights the importance of handling personal data carefully to avoid breaches of confidentiality.
What happened
Piraeus Bank sent a document containing personal data to a third party due to an incorrect email address.
Who was affected
Individuals whose personal data was included in the document sent to the wrong email address.
What the authority found
The Hellenic Data Protection Authority found that Piraeus Bank violated confidentiality principles by not stopping the erroneous communications.
Why this matters
This ruling emphasizes that companies must act quickly to correct data breaches. It serves as a reminder for businesses to ensure they have proper procedures in place to protect personal data.
View original scraped data
Original imported citations before automated processing; the processing history does not establish independent verification.
Source checks
Linked-source text retrieved.
Automated check recorded — 14 March 2026.
No issues were reported by that automated check.
Retrieved text may be a secondary summary or an announcement. These automated statuses do not establish that the original decision was read or that the record received an independent legal review. How we check sources
The Hellenic DPA has imposed a fine of EUR 10,000 on Piraeus Bank. The bank had mistakenly sent a document containing data of the data subject to a third party. This error was based on a wrongly provided e-mail address by a co-owner of the account. Although the bank became aware of this error, they did not stop sending the communications to the third party, but instead instructed the data subject to exercise their right to correct the inaccurate data. As a result of its investigation, the DPA found that the bank had violated the principle of confidentiality for failing to stop sending the communications. The DPA also found that the bank had failed to report the data breach to the DPA and the data subject in a timely manner.
Related Enforcement Actions (1)
Other enforcement actions involving Piraeus Bank in GR
Details
Fine Date
4 April 2022
Authority
Hellenic Data Protection Authority
Fine Amount
€10,000
GDPRhub ID
gdprhub-4868About this data
Cite as: Cookie Fines. Piraeus Bank - Greece (2022). Retrieved from cookiefines.eu
Last updated: