The Hellenic Data Protection Authority imposed administrative fines of EUR 200,000 on the Ministry of Social Cohesion and Family Affairs and EUR 150,000 on E.E.T.A.A. S.A. for a large‑scale personal data breach. The Authority also ordered the parties to conclude a data processing agreement and to fully implement security measures. The breach involved personal, financial and health data of many data subjects.
Why it matters: The decision highlights enforcement of GDPR security and processor obligations after a major data breach in a government programme.
Summary generated from the sources below. Check the primary source before relying on it; this is not legal advice.
