- Enforcing jurisdiction
- Greece · Geography does not establish applicable law.
- Confirmed applicable legislation
- Privacy topics
Ergasias S.A – Dismissed (Greece, 2019)
Privacy enforcement record
This record is classified outside cookie consent. Subject classification does not confirm an applicable law. It is not included in cookie statistics or the Risk Calculator.
The Hellenic Data Protection Authority dismissed a bank's appeal regarding how it handled a data access request. The bank argued that the requirements were too strict, but the authority decided there was no reason to change its earlier advice. This case shows that companies must follow data protection guidelines carefully.
What happened
The bank's appeal against a decision on how to respond to a data access request was dismissed.
Who was affected
Eurobank Ergasias S.A. and its debtors were involved in this case.
What the authority found
The authority ruled that there was no basis to reconsider the previous decision regarding the bank's obligations.
Why this matters
This case reinforces the need for companies to adhere to data protection regulations and respond appropriately to access requests from users.
View original scraped data
Original imported citations before automated processing; the processing history does not establish independent verification.
Source checks
Secondary-source text retrieved.
Automated check recorded — 22 March 2026.
No issues were reported by that automated check.
Retrieved text may be a secondary summary or an announcement. These automated statuses do not establish that the original decision was read or that the record received an independent legal review. How we check sources
The Greek bank Eurobank Ergasias S.A. appealed before the HDPA to challenge HDPA's older decision. The appealed decision provided advises on what measures the Bank should have taken to properly respond to a data subject's access request and to guarantee the exercise of the right to object. The Bank claimed that the appealed decision imposed disproportionate obligations on it and on other creditors violating the former national data protection law and the law on the establishment of debtor notification companies. The issue at stake was mainly the determination of the period within which the Bank had to notify the personal data to the data subjects, in order for the debtors to be able to exercise their rights to access and to object. The appealed decision recommended that the Bank provide the debtors with a reasonable period of 10-15 days starting from the notification of the debtors until the Bank distributes their personal data to the debtor notification companies. The HDPA ruled that there is no ground for re-examination of this case. Thus, it rejected the appeal.
Outcome
Dismissed
The complaint or investigation was dismissed.
Related Enforcement Actions (0)
No other enforcement actions found for Ergasias S.A in GR
This is the only recorded action for this entity in this jurisdiction.
Details
About this data
Cite as: Cookie Fines. Ergasias S.A - Greece (2019). Retrieved from cookiefines.eu
Last updated: