# Mayor: Insufficient legal basis for data processing

- Type: Enforcement
- Source: Hellenic Data Protection Authority (HDPA)
- Date: 2022-04-04
- Original: https://www.enforcementtracker.com/ETid-1137
- Canonical: https://overview.legal/posts/47252
- Topics: IP Address, Employees, Consent, Public Authority, Processing Agreement, Processing, Supervisory Authorities

## Summary

The Hellenic DPA has fined a mayor EUR 5,000. The mayor had sent documents of an employee of the municipality to third parties without the employee's consent. The DPA considered this to be a violation of Art. 5 (1) a) GDPR.

## Full text

The Hellenic DPA has fined a mayor EUR 5,000. The mayor had sent documents of an employee of the municipality to third parties without the employee's consent. The DPA considered this to be a violation of Art. 5 (1) a) GDPR.

GDPR Articles: Art. 5 (1) a) GDPR
Industry: Employment

---
Generated by overview.legal · https://overview.legal/posts/47252 · 2026-08-22