Athens Urban Transport Organization – €50,000 Fine (Greece, 2023)
General GDPR enforcement action
This case relates to broader data protection obligations, not specifically to cookie or consent banner compliance. It is not included in cookie statistics or the Risk Calculator.
The Hellenic Data Protection Authority fined the Athens Urban Transport Organization EUR 50,000 for not protecting personal data properly. They failed to design their systems with privacy in mind and didn't assess the risks of their data practices. This case highlights the importance of building privacy into services from the start.
What happened
The Hellenic DPA fined the Athens Urban Transport Organization for failing to implement data protection by design and by default.
Who was affected
People whose personal data was collected and stored by the Athens Urban Transport Organization were affected.
What the authority found
The authority found that the organization did not comply with GDPR requirements for data protection by design and failed to conduct necessary assessments.
Why this matters
This ruling stresses that companies must prioritize privacy in their operations. It serves as a reminder for businesses to integrate data protection measures early in their processes.
GDPR Articles Cited
The Hellenic DPA imposed a fine of EUR 50,000 on the Athens Urban Transport Organization. As part of its investigation, the DPA found that the controller had failed to comply with the principle of data protection by design and by default. It also failed to carry out a data protection impact assessment and to set appropriate retention periods for the storage of personal data.
Related Enforcement Actions (0)
No other enforcement actions found for Athens Urban Transport Organization in GR
This is the only recorded action for this entity in this jurisdiction.
Details
Fine Date
25 September 2023
Authority
Hellenic Data Protection Authority
Fine Amount
€50,000
Enforcement Tracker ID
ETid-2117
About this data
Cite as: Cookie Fines. Athens Urban Transport Organization - Greece (2023). Retrieved from cookiefines.eu
Last updated: