# Ministry of Interior (Greece): Insufficient technical and organisational measures to ensure information security

- Type: Enforcement
- Source: Hellenic Data Protection Authority (HDPA)
- Date: 2024-05-27
- Original: https://www.enforcementtracker.com/ETid-2556
- Canonical: https://overview.legal/posts/48671
- Topics: Public Authority, Education, Personal Data, Security, Public Sector, Processing Agreement, Supervisory Authorities

## Summary

The Hellenic DPA imposed a fine of EUR 400,000 on the Ministry of Interior for leaking email addresses from the voter registry of Greek expatriates. These personal data, which were intended for electoral purposes, were subsequently misused by a Member of the European Parliament (MEP) to send unsolicited political communications.

## Full text

The Hellenic DPA imposed a fine of EUR 400,000 on the Ministry of Interior for leaking email addresses from the voter registry of Greek expatriates. These personal data, which were intended for electoral purposes, were subsequently misused by a Member of the European Parliament (MEP) to send unsolicited political communications.

GDPR Articles: Art. 5 (1) f) GDPR, 32 GDPR, 25 (1) GDPR, 33 (3), (4), (5) GDPR
Industry: Public Sector and Education

---
Generated by overview.legal · https://overview.legal/posts/48671 · 2026-08-22