Enforcing jurisdiction
Greece · Geography does not establish applicable law.
Confirmed applicable legislation
Privacy topics

Piraeus Bank – €30,000 Fine (Greece, 2023)

€30,000Hellenic Data Protection Authority2 February 2023Greece
final
Fine

Privacy enforcement record

This record is classified outside cookie consent. Subject classification does not confirm an applicable law. It is not included in cookie statistics or the Risk Calculator.

Piraeus Bank was fined €30,000 for sharing account information without permission. A customer complained after the bank disclosed details about joint accounts to heirs during legal proceedings. This case highlights the importance of protecting personal information and following legal protocols.

What happened

Piraeus Bank disclosed joint account information to heirs without proper consent.

Who was affected

A customer who jointly owned two bank accounts with another individual.

What the authority found

The Hellenic Data Protection Authority ruled that the bank unlawfully disclosed personal data and failed to report the incident promptly.

Why this matters

This ruling emphasizes that banks must handle customer information carefully and report breaches in a timely manner. It serves as a reminder for all companies to prioritize data protection and compliance.

Recorded legal citations
Automatically processed
Art. 33 GDPR
Art. 34 GDPR
Art. 5(1)(a) GDPR
View original scraped data
Art. 5(1) a) GDPR
f) GDPR
Art. 33(GDPR)
Art. 34(GDPR)

Original imported citations before automated processing; the processing history does not establish independent verification.

Source checks

Linked-source text retrieved.

Review needed — 13 March 2026.

Processing notes: date discrepancy.

Retrieved text may be a secondary summary or an announcement. These automated statuses do not establish that the original decision was read or that the record received an independent legal review. How we check sources

Full Legal Summary
Detailed

The Hellenic DPA has imposed a fine of EUR 30,000 on Piraeus Bank. A customer had filed a complaint with the DPA because the bank had disclosed transaction and account balance information from two bank accounts of which they were joint owners to the heirs of the other owner in the course of legal proceedings. The DPA determined, that the disclosure of the joint account information was unlawful. In addition, the bank failed to report the incident to the DPA and the data subject in a timely manner.

Details

Fine Date

2 February 2023

Authority

Hellenic Data Protection Authority

Fine Amount

€30,000

About this data

Data: CMS GDPR Enforcement Tracker
Licensed under CC BY-NC-SA 4.0
Automatically normalized and classified

Cite as: Cookie Fines. Piraeus Bank - Greece (2023). Retrieved from cookiefines.eu

Report Inaccuracy

Last updated: