# General Hospital of the University of Larissa: Insufficient fulfilment of data subjects rights

- Type: Enforcement
- Source: Hellenic Data Protection Authority (HDPA)
- Date: 2025-06-24
- Original: https://www.enforcementtracker.com/ETid-2750
- Canonical: https://overview.legal/posts/48865
- Topics: Healthcare, Healthcare, Personal Data, Controllers, IP Address, Education, Processing Agreement, Supervisory Authorities, Data Controller, Law Enforcement

## Summary

The Hellenic DPA has imposed a fine of EUR 7,000 on the General Hospital of the University of Larissa. The controller failed to adequately fulfil the rights of data subjects. It also failed to demonstrate that it processed data in accordance with the general principles.

## Full text

The Hellenic DPA has imposed a fine of EUR 7,000 on the General Hospital of the University of Larissa. The controller failed to adequately fulfil the rights of data subjects. It also failed to demonstrate that it processed data in accordance with the general principles.

GDPR Articles: Art. 5 (2) GDPR, Art. 14 GDPR, Art. 15 GDPR
Industry: Health Care

---
Generated by overview.legal · https://overview.legal/posts/48865 · 2026-08-22