Shield of David - K.I.D.A.F.
€10,000
Non-compliance with general data processing principles
Decision Date
June 24, 2025
Authority
Hellenic Data Protection Authority (HDPA)
GR
Sector
Health Care
Country
GR
Law
GDPRStatus
FINALDescription
The Hellenic DPA has imposed a fine of EUR 10,000 on Shield of David - K.I.D.A.F. The controller, a day care centre for people with autism, has legally installed video surveillance on its premises. However, the controller failed to adequately respond to a data subject's request to exercise their rights. Furthermore, the controller forwarded data to third entities without notifying the data subject. Lastly, the controller failed to cooperate adequately with the DPA.
Legal Citations
Art. 5Art. 12Art. 13Art. 15Art. 24Art. 31
Issues & Violations
Non-compliance with general data processing principles