Hellenic Data Protection Authority (HDPA) · 8 January 2026
Headquarter of a Fire Brigade
Insufficient legal basis for data processing
- Regulator
- Hellenic Data Protection Authority (HDPA)
- Decided
- 8 January 2026
- Country
- Greece
- Sector
- Employment
- Regulator’s reference
- Not recorded
- Fino case number
- 2026/GR/001
What happened
The DPA imposed a €10,000 administrative fine on the Fire Department Headquarters for the unlawful processing of sensitive personal data, including health data and disciplinary sanctions. It emphasized that the lack of intent is irrelevant and does not remove responsibility.
Summary from the GDPRhub page for this decision, written by its volunteers, not by Fino. CC BY-NC-SA 4.0.
Rules involved
The source doesn’t list which GDPR articles were involved.
- Unlawful processing
Sources
The facts on this page come from the sources above, as they recorded them. Nothing has been estimated or filled in. Not legal advice.
Spotted a mistake? Write to angelillolorenzo@gmail.com and quote 2026/GR/001.