# Hermes Airport Ltd.: Insufficient technical and organisational measures to ensure information security

- Type: Enforcement
- Source: Cypriot Data Protection Commissioner
- Date: 2022-01-01
- Original: https://www.enforcementtracker.com/ETid-1618
- Canonical: https://overview.legal/posts/47733
- Topics: Security, Controllers, Processors, Privacy by Design & Default, Processing Agreement, Personal Data, Supervisory Authorities, Data Processor, Supervision, Data Controller

## Summary

The Cypriot DPA has imposed a fine of EUR 6,000 on Hermes Airport Ltd. The controller had suffered a cyber attack which, according to the DPA, had been caused due to a lack of technical and organizational measures for the protection of personal data and a lack of supervision of a processor.

## Full text

The Cypriot DPA has imposed a fine of EUR 6,000 on Hermes Airport Ltd. The controller had suffered a cyber attack which, according to the DPA, had been caused due to a lack of technical and organizational measures for the protection of personal data and a lack of supervision of a processor.

GDPR Articles: Art. 24 GDPR, Art. 32 GDPR
Industry: Transportation and Energy

---
Generated by overview.legal · https://overview.legal/posts/47733 · 2026-08-22