DPA Commissioner
Data protection authority of Cyprus
Total Actions
17
Total Fines
€66K
Average Fine
€13K
Among actions with fines
Enforcement Factor
1.50
Moderately active
About DPA Commissioner
The DPA Commissioner is Cyprus's data protection authority and an active enforcer of GDPR and ePrivacy requirements. DPA Commissioner has taken 17 enforcement actions resulting in €66,000 in total penalties, with an average fine of €13K per sanctioned entity. The authority maintains a balanced enforcement approach (enforcement factor: 1.5), combining deterrent fines with corrective orders. Its most significant action was a €45,000 fine against Open University of Cyprus in 2023. The most frequently cited legal basis in DPA Commissioner's decisions is Art. 15(GDPR) and Art. 17(GDPR).
Largest Fines by DPA Commissioner
View all actionsRecent Actions by DPA Commissioner
View all actionsEnforcement by Year
| Year | Actions | Total Fines |
|---|---|---|
| 2020 | 6 | €6K |
| 2021 | 1 | €0 |
| 2023 | 3 | €45K |
| 2024 | 4 | €5K |
| 2025 | 3 | €10K |
Most Enforced Violations
Frequently Asked Questions
How many GDPR and ePrivacy actions has DPA Commissioner issued?
DPA Commissioner has issued 17 enforcement actions related to GDPR and ePrivacy, totaling €66K.
What is DPA Commissioner's largest GDPR and ePrivacy fine?
The largest was a €45K fine against Open University of Cyprus on 2023-11-27.
What violations does DPA Commissioner enforce most?
The most commonly enforced violations by DPA Commissioner are third-party cookies without consent.