Enforcing jurisdiction
Greece · Geography does not establish applicable law.
Confirmed applicable legislation
No confirmed legal basis recorded.
Privacy topics

Organization of Urban Transport of Thessaloniki (OASTH) – €10,000 Fine (Greece, 2021)

€10,000Hellenic Data Protection Authority7 September 2021Greece
final
Fine

Privacy enforcement record

This record is classified outside cookie consent. Subject classification does not confirm an applicable law. It is not included in cookie statistics or the Risk Calculator.

The Organization of Urban Transport of Thessaloniki (OASTH) was fined for disclosing the identities of former shareholders during a public dispute. The company failed to respect the privacy rights of these individuals. This case highlights the need for organizations to handle personal information carefully, especially in sensitive situations.

What happened

OASTH disclosed personal information about former shareholders during a press conference without their consent.

Who was affected

Former shareholders of OASTH whose identities were publicly disclosed.

What the authority found

The Hellenic Data Protection Authority found that OASTH violated GDPR by not protecting the personal data of former shareholders.

Why this matters

This case underscores the importance of privacy in corporate communications. Companies must be cautious when discussing sensitive information to avoid legal consequences.

Recorded legal citations
Automatically processed
Art. 15 GDPR
Art. 21 GDPR
View original scraped data
Art. 15(GDPR)
Art. 21(GDPR)

Original imported citations before automated processing; the processing history does not establish independent verification.

National Law Articles
AI-identified
Articles 4, 5, 12 and 13 of Law 2472/1997 on the Protection of Individuals with regard to the Processing of Personal Data

Entities Involved

Organization of Urban Transport of Thessaloniki (OASTH)
Former shareholders of OASTH (anonymous)

Source checks

Linked-source text retrieved.

Automated check recorded — 14 March 2026.

Processing notes: articles corrected, national law identified.

Retrieved text may be a secondary summary or an announcement. These automated statuses do not establish that the original decision was read or that the record received an independent legal review. How we check sources

Full Legal Summary
Detailed

The Organization of Urban Transport of Thessaloniki (OASTH) was one of the largest transport company in Greece. A few months before OASTH entered in insolvency proceedings, employees of the city of Thessaloniki organized strikes during several days. Those strikes were organized, inter alia, to protest against the fact that dividends had been paid to shareholders, while some due salaries had not been paid to employees. This strike was a central political issue not only for Thessaloniki but also for the entire country. Two years after having been acquired by the Greek State, OASTH remained at the center of many political debates. Aware of this, the President of OASTH decided to implement a policy of transparency towards the public. In 2021, several former shareholders of OASTH started contesting the return/value of the shares of OASTH. In the context of this dispute, some of the former shareholders entered into settlement negotiations with OASTH, while others got involved is a public feud with the company. During a press conference, the identity of several former shareholders involved in the dispute was disclosed by the President of OASTH. On the same day, the names of twenty-nine former shareholders were also published in a press release written by OASTH, together with the percentage of their participation in the capital of OASTH, the date of acquisition of the shares, and the acquisition price in euros. Those information were further picked up by journalists and shared in the press and on social media. Following the publication of these information, nine shareholders decided to exercise their right to access to their personal data, and their right to object to the processing of personal data, in accordance with Article 12 and Article 13 of the Law 2472/1997. OASTH however did not follow up on these requests, before arguing that the shareholders had not paid the administrative fee which was due to submit such requests. In this context, twelve of the former shareholde

Related Enforcement Actions (0)

No other enforcement actions found for Organization of Urban Transport of Thessaloniki (OASTH) in GR

This is the only recorded action for this entity in this jurisdiction.

Details

Fine Date

7 September 2021

Authority

Hellenic Data Protection Authority

Fine Amount

€10,000

About this data

Data: GDPRhub (noyb.eu)
Licensed under CC BY-NC-SA 4.0
Automatically normalized and classified

Cite as: Cookie Fines. Organization of Urban Transport of Thessaloniki (OASTH) - Greece (2021). Retrieved from cookiefines.eu

Report Inaccuracy

Last updated: