Headquarter of a Fire Brigade – €10,000 Fine (Greece, 2026)

€10,000Hellenic Data Protection Authority8 January 2026Greece
final
Fine

General GDPR enforcement action

This case relates to broader data protection obligations, not specifically to cookie or consent banner compliance. It is not included in cookie statistics or the Risk Calculator.

The Hellenic Data Protection Authority fined a Fire Brigade Headquarters €10,000 for improperly storing an employee's health data. The organization kept excessive medical information related to the employee's sick leave without a valid reason. This case serves as a reminder for employers to limit data collection to what is necessary.

What happened

The Fire Brigade Headquarters stored unnecessary health data of an employee related to her sick leave.

Who was affected

An employee of the Fire Brigade was affected by the improper storage of her health data.

What the authority found

The authority found that the Fire Brigade violated GDPR by processing more health data than necessary.

Why this matters

This case underscores the need for organizations to collect only the data they truly need. It serves as a caution for employers to review their data handling practices to comply with GDPR.

GDPR Articles Cited

AI-verified

Art. 5(1)(a) ) GDPR
View original scraped data
Art. 5(1) a ) GDPR
c) GDPR

Original data from scraper before AI verification against source document.

Source verified 14 March 2026
articles corrected
Full Legal Summary
Detailed

The Greek DPA has imposed a fine of EUR 10,000 on a Fire Brigade Head Quarter. The controller had stored health data of an employee which had been in relation with her sick leave. The controller stored every detail of the medical condition, treatment and other related data. The ammount of data processed had not been necessary for the purpose and therefore no legal basis.

Related Enforcement Actions (0)

No other enforcement actions found for Headquarter of a Fire Brigade in GR

This is the only recorded action for this entity in this jurisdiction.

Details

Fine Date

8 January 2026

Authority

Hellenic Data Protection Authority

Fine Amount

€10,000

Enforcement Tracker ID

ETid-2999

About this data

Data: CMS GDPR Enforcement Tracker
Licensed under CC BY-NC-SA 4.0
AI-verified and classified

Cite as: Cookie Fines. Headquarter of a Fire Brigade - Greece (2026). Retrieved from cookiefines.eu

Report Inaccuracy

Last updated: