Hermes Airport Ltd.
€6,000
Insufficient technical and organisational measures to ensure information security
Decision Date
January 1, 2022
Authority
Cypriot Data Protection Commissioner
CY
Sector
Transportation and Energy
Country
CY
Law
GDPRStatus
FINALDescription
The Cypriot DPA has imposed a fine of EUR 6,000 on Hermes Airport Ltd. The controller had suffered a cyber attack which, according to the DPA, had been caused due to a lack of technical and organizational measures for the protection of personal data and a lack of supervision of a processor.
Legal Citations
Art. 24Art. 32
Issues & Violations
Insufficient technical and organisational measures to ensure information security