- Enforcing jurisdiction
- Greece · Geography does not establish applicable law.
- Confirmed applicable legislation
- Privacy topics
Piraeus Bank – €210,000 Fine (Greece, 2023)
Privacy enforcement record
This record is classified outside cookie consent. Subject classification does not confirm an applicable law. It is not included in cookie statistics or the Risk Calculator.
Piraeus Bank was fined EUR 210,000 by the Hellenic Data Protection Authority for mishandling customer data. The bank failed to process personal data lawfully and did not take proper measures to protect the data. This case highlights the importance of following data protection rules to avoid hefty fines.
What happened
Piraeus Bank processed personal data of customers without lawful basis and failed to implement necessary data protection measures.
Who was affected
Customers of Piraeus Bank whose personal data was improperly handled.
What the authority found
The authority found that Piraeus Bank violated GDPR by not processing personal data lawfully and not taking adequate security measures.
Why this matters
This fine serves as a warning to banks and other businesses about the consequences of not complying with data protection laws. Companies must ensure they have valid reasons for processing personal data and implement strong security measures.
View original scraped data
Original imported citations before automated processing; the processing history does not establish independent verification.
Source checks
Linked-source text retrieved.
Automated check recorded — 6 March 2026.
Processing notes: articles corrected.
Retrieved text may be a secondary summary or an announcement. These automated statuses do not establish that the original decision was read or that the record received an independent legal review. How we check sources
The Hellenic DPA has imposed a fine of EUR 210,000 on Piraeus Bank. During its investigation, the DPA found that the bank had processed personal data of customers in violation of the principle of lawfulness. In addition, the DPA found that the bank had processed personal data without taking appropriate and effective technical and organizational measures to process only the data necessary for the specific purpose. Finally, the DPA found that the bank had failed to properly comply with a data subject's request for access to their personal data.
Related Enforcement Actions (0)
No other enforcement actions found for Piraeus Bank in GR
This is the only recorded action for this entity in this jurisdiction.
Details
Fine Date
12 June 2023
Authority
Hellenic Data Protection Authority
Fine Amount
€210,000
About this data
Cite as: Cookie Fines. Piraeus Bank - Greece (2023). Retrieved from cookiefines.eu
Last updated: