Ekdotikos Oikos Dias Dimosia Ltd – Court Ruling (Cyprus, 2026)

Court Ruling
Commissioner for Personal Data Protection26 May 2026Cyprus
final
Court Ruling

General GDPR enforcement action

This case relates to broader data protection obligations, not specifically to cookie or consent banner compliance. It is not included in cookie statistics or the Risk Calculator.

A Cypriot media group was found to have improperly published financial information about a public figure. This case is important because it stresses the need for media outlets to respect individuals' privacy rights when reporting.

What happened

The media group published financial details of a public figure without adequately considering their privacy rights.

Who was affected

The public figure whose financial information was disclosed by the media outlet.

What the authority found

The authority ruled that the media group violated data protection principles by failing to balance journalistic interests with the individual's privacy rights.

Why this matters

This case serves as a reminder for media companies to carefully evaluate privacy concerns when publishing sensitive information, ensuring compliance with data protection laws.

GDPR Articles Cited

AI-verified

Art. 5(1)(a) GDPR
Art. 5(1)(c) GDPR
Art. 5(1)(d) GDPR
View original scraped data
Art. 5(1)(a) GDPR
Art. 5(1)(c) GDPR
Art. 5(1)(d) GDPR
Art. 85(GDPR)

Original data from scraper before AI verification against source document.

Decision AuthorityAdministrative Court of Cyprus
Reviewed AuthorityCypriot DPA
Source verified 13 June 2026
amount discrepancy
authority corrected
Full Legal Summary
Detailed

On 13 March 2019, Sigma, a Cypriot TV channel belonging to Ekdotikos Oikos Dias Dimosia Ltd, a Cypriot media group (the controller), published a report disclosing financial information concerning a public figure in Cyprus (the data subject). The publication was part of reporting on whether there had been favourable treatment of a politically exposed person. On 15 April 2019, the data subject lodged a complaint with the Cypriot DPA concerning the disclosure of their financial personal data by media outlets belonging to the controller’s group. The DPA found that the controller had failed to properly balance the journalistic interest in publication against the data subject’s rights to privacy and data protection. In particular, the DPA considered that the controller had failed to demonstrate that it had taken into account certain balancing criteria, including whether the processing was carried out exclusively for journalistic purposes, whether it was strictly necessary to ensure the right to information on matters of public interest, whether the information was accurate and truthful, and whether there had been prior contact with the data subject. The DPA held that, by publishing information concerning the data subject’s financial situation, the controller had infringed the principles of lawfulness, fairness and transparency, data minimisation and accuracy. Therefore, it found that the controller infringed Article 5(1)(a) GDPR, Article 5(1)(c) GDPR and Article 5(1)(d) GDPR. Accordingly, the DPA fined the controller €10,000 and ordered it to remove the publication from the websites of all entities controlled by it within one week. The controller challenged the decision before the Administrative Court of Cyprus. It argued, among other things, that the DPA had violated its right to freedom of expression and its exercise of journalistic freedom under Article 85 GDPR. The court found that the DPA had not violated the controller’s freedom of expression or journalistic freed

Outcome

Court Ruling

A ruling by a national court on a data-protection matter.

Related Cases (0)

No other cases found for Ekdotikos Oikos Dias Dimosia Ltd in CY

This is the only recorded case for this entity in this jurisdiction.

Details

Ruling Date

26 May 2026

Authority

Commissioner for Personal Data Protection

About this data

Data: GDPRhub (noyb.eu)
Licensed under CC BY-NC-SA 4.0
AI-verified and classified

Cite as: Cookie Fines. Ekdotikos Oikos Dias Dimosia Ltd - Cyprus (2026). Retrieved from cookiefines.eu

Report Inaccuracy

Last updated: