Enforcement
EN Ministry of Interior (Greece): Insufficient technical and organisational measures to ensure information security
€400,000 fine - Hellenic Data Protection Authority (HDPA)
Content
The Hellenic DPA imposed a fine of EUR 400,000 on the Ministry of Interior for leaking email addresses from the voter registry of Greek expatriates. These personal data, which were intended for electoral purposes, were subsequently misused by a Member of the European Parliament (MEP) to send unsolicited political communications.
GDPR Articles: Art. 5 (1) f) GDPR, 32 GDPR, 25 (1) GDPR, 33 (3), (4), (5) GDPR
Industry: Public Sector and Education