Headquarter of a Fire Brigade: Insufficient legal basis for data processing

€10,000 fine - Hellenic Data Protection Authority (HDPA)

€10,000 Fine

Headquarter of a Fire Brigade

GREECE

Insufficient legal basis for data processing

Jan 8, 2026 Source

Content

The Greek DPA has imposed a fine of EUR 10,000 on a Fire Brigade Head Quarter. The controller had stored health data of an employee which had been in relation with her sick leave. The controller stored every detail of the medical condition, treatment and other related data. The ammount of data processed had not been necessary for the purpose and therefore no legal basis.

GDPR Articles: Art. 5 (1) a ), c) GDPR
Industry: Employment