# Shield of David - K.I.D.A.F.: Non-compliance with general data processing principles

- Type: Enforcement
- Source: Hellenic Data Protection Authority (HDPA)
- Date: 2025-06-24
- Original: https://www.enforcementtracker.com/ETid-2754
- Canonical: https://overview.legal/posts/48869
- Topics: Video Surveillance, Controllers, Monitoring, IP Address, Personal Data, Healthcare, Processing Agreement, Supervisory Authorities, Processing, Data Controller

## Summary

The Hellenic DPA has imposed a fine of EUR 10,000 on Shield of David - K.I.D.A.F. The controller, a day care centre for people with autism, has legally installed video surveillance on its premises. However, the controller failed to adequately respond to a data subject's request to exercise their rights. Furthermore, the controller forwarded data to third entities without notifying the data subject. Lastly, the controller failed to cooperate adequately with the DPA.

## Full text

The Hellenic DPA has imposed a fine of EUR 10,000 on Shield of David - K.I.D.A.F. The controller, a day care centre for people with autism, has legally installed video surveillance on its premises. However, the controller failed to adequately respond to a data subject's request to exercise their rights. Furthermore, the controller forwarded data to third entities without notifying the data subject. Lastly, the controller failed to cooperate adequately with the DPA.

GDPR Articles: Art. 5 GDPR, Art. 12 GDPR, Art. 13 GDPR, Art. 15 GDPR, Art. 24 GDPR, Art. 31 GDPR
Industry: Health Care

---
Generated by overview.legal · https://overview.legal/posts/48869 · 2026-08-22