Ministry of Interior (Greece)
€400,000
Insufficient technical and organisational measures to ensure information security
Decision Date
May 27, 2024
Authority
Hellenic Data Protection Authority (HDPA)
GR
Sector
Public Sector and Education
Country
GR
Law
GDPRStatus
FINALDescription
The Hellenic DPA imposed a fine of EUR 400,000 on the Ministry of Interior for leaking email addresses from the voter registry of Greek expatriates. These personal data, which were intended for electoral purposes, were subsequently misused by a Member of the European Parliament (MEP) to send unsolicited political communications.
Legal Citations
Art. 5 (1)
Issues & Violations
Insufficient technical and organisational measures to ensure information security