# Municipality of Moschato–Tavros: Insufficient legal basis for data processing

- Type: Enforcement
- Source: Hellenic Data Protection Authority (HDPA)
- Date: 2025-10-09
- Original: https://www.enforcementtracker.com/ETid-2936
- Canonical: https://overview.legal/posts/49051
- Topics: Video Surveillance, Public Authority, Monitoring, Processing, Controllers, IP Address, Education, Public Sector, Processing Agreement, Supervisory Authorities

## Summary

The Hellenic DPA has imposed a fine of EUR 10,000 on the Municipality of Moschato–Tavros. The controller installed a video surveillance system in a depot to protect municipal vehicles. However, the controller failed to ensure, during the design phase, that the cameras only processed the necessary data. They also failed to adequately inform their employees and record the processing activities.

## Full text

The Hellenic DPA has imposed a fine of EUR 10,000 on the Municipality of Moschato–Tavros. The controller installed a video surveillance system in a depot to protect municipal vehicles. However, the controller failed to ensure, during the design phase, that the cameras only processed the necessary data. They also failed to adequately inform their employees and record the processing activities.

GDPR Articles: Art. 5 (1) a), c), (2) GDPR, Art. 12 (1) GDPR, Art. 13 GDPR, Art. 25 (1) GDPR
Industry: Public Sector and Education

---
Generated by overview.legal · https://overview.legal/posts/49051 · 2026-08-22