HDPA (Greece) - 10/2026

Small amendments to short summary }}}} In a decision on two separate complaints, the DPA fined two controllers €65,000 and €95,000 respectively for failures relating to the disclosure and further use of CCTV footage, responses to access requests and compliance with multiple data-protection principles and obligations.The DPA fined the operator of an exhibition centre and a supermarket chain €65,000 and €95,000 respectively for failures relating to the disclosure and further use of CCTV footage, responses to access requests and compliance with multiple data-protection principles and obligations. == English Summary ==== English Summary == The DPA found that although the data subject’s access requests had been formulated clearly, both controllers nevertheless requested additional clarification, therefore making the exercise of his right of access more difficult. The DPA found that although the data subject’s access requests had been formulated clearly, both controllers nevertheless request