# Housing Finance Corporation: Insufficient legal basis for data processing

- Type: Enforcement
- Source: Cypriot Data Protection Commissioner
- Date: 2025-03-10
- Original: https://www.enforcementtracker.com/ETid-2837
- Canonical: https://overview.legal/posts/48952
- Topics: Controllers, Insurance, Processing Agreement, Processing, Data Controller, Supervisory Authorities

## Summary

The Cypriot DPA has imposed a fine of EUR 10,000 on the Housing Finance Corporation. The controller stored client loan data for longer than necessary and did not ensure that the data was correct. This resulted in the controller incorrectly declining a client's loan application.

## Full text

The Cypriot DPA has imposed a fine of EUR 10,000 on the Housing Finance Corporation. The controller stored client loan data for longer than necessary and did not ensure that the data was correct. This resulted in the controller incorrectly declining a client's loan application.

GDPR Articles: Art. 5 (1) d), e) GDPR, Art. 24 (1) GDPR
Industry: Finance, Insurance and Consulting

---
Generated by overview.legal · https://overview.legal/posts/48952 · 2026-08-22