Commissioner for Personal Data Protection
Data protection authority of Cyprus
Total Actions
49
Total Fines
€1.5M
Average Fine
€32K
Among actions with fines
Enforcement Factor
1.10
Measured
About Commissioner for Personal Data Protection
The Commissioner for Personal Data Protection is Cyprus's data protection authority responsible for enforcing GDPR and data-protection compliance. Commissioner for Personal Data Protection has taken 49 enforcement actions resulting in €1,460,500 in total penalties, with an average fine of €32K per sanctioned entity. The authority maintains a balanced enforcement approach (enforcement factor: 1.1), combining deterrent fines with corrective orders. Its most significant action was a €925,000 fine against WS WiSpear Systems Ltd in 2021. The most frequently cited legal basis in Commissioner for Personal Data Protection's decisions is Art. 32(GDPR) and Art. 6(GDPR).
Largest Fines by Commissioner for Personal Data Protection
View all actionsRecent Actions by Commissioner for Personal Data Protection
View all actionsEnforcement by Year
| Year | Actions | Total Fines |
|---|---|---|
| 2019 | 6 | €111K |
| 2020 | 5 | €32K |
| 2021 | 9 | €1.1M |
| 2022 | 14 | €80K |
| 2023 | 8 | €85K |
| 2024 | 3 | €7K |
| 2025 | 1 | €25K |
| 2026 | 3 | €0 |
Most Enforced Violations
Most Cited GDPR Articles
Frequently Asked Questions
How many GDPR and data-protection actions has Commissioner for Personal Data Protection issued?
Commissioner for Personal Data Protection has issued 49 enforcement actions related to GDPR and data-protection, totaling €1.5M.
What is Commissioner for Personal Data Protection's largest GDPR and data-protection fine?
The largest was a €925K fine against WS WiSpear Systems Ltd on 2021-11-12.
What violations does Commissioner for Personal Data Protection enforce most?
The most commonly enforced violations by Commissioner for Personal Data Protection are third-party cookies without consent.