Speech and Special Education Centre - Mihou Dimitra
€8,000
Insufficient fulfilment of data subjects rights
Decision Date
March 20, 2020
Authority
Hellenic Data Protection Authority (HDPA)
GR
Sector
Health Care
Country
GR
Law
GDPRStatus
FINALDescription
The complainant had requested access to his child's data and to tax information. This request was rejected by the data controller. In addition, the data controller had violated an order of the data protection authority regarding access to the data. For this, a fine of EUR 8000 was imposed: EUR 3000 for not granting access to the data and EUR 5000 for violating orders of the data protection authority.
Legal Citations
Art. 15Art. 58
Issues & Violations
Insufficient fulfilment of data subjects rights