# Decentralised Administration of the Aegean (Αποκεντρωμένη Διοίκηση Αιγαίου): Insufficient legal basis for data processing

- Type: Enforcement
- Source: Hellenic Data Protection Authority (HDPA)
- Date: 2026-10-06
- Original: https://www.enforcementtracker.com/ETid-3341
- Canonical: https://overview.legal/posts/603856
- Topics: Public Authority, Supervisory Authorities

## Summary

The Hellenic Data Protection Authority fined the Decentralised Administration of the Aegean €2,000 for violating Articles 5(1)(a) and 6(1)(c) GDPR by processing personal data without a sufficient legal basis. The case concerned a public sector and education matter in which the authority found the controller had not established a valid legal ground under EU data protection law. The HDPA imposed the monetary penalty to address the inadequate legal basis for the data processing at issue.

## Full text

Hellenic Data Protection Authority (HDPA) fined Decentralised Administration of the Aegean (Αποκεντρωμένη Διοίκηση Αιγαίου) €2,000 on 2026-10-06 for: Insufficient legal basis for data processing.
GDPR Articles: Art. 5 (1) a) GDPR, Art. 6 (1) c) GDPR
Sector: Public Sector and Education
Country: Greece
Source: http://www.dpa.gr/sites/default/files/2026-10/18_2026%20anonym_0.pdf

---
Generated by overview.legal · https://overview.legal/posts/603856 · 2026-10-24