GDPR Fines

A public record of GDPR enforcement across Europe — compiled by INPLP members

Breikot Management Ltd

Country
Cyprus
Fine
13,000 EUR
Date
2019-04-12
Sector
News outlet/Publishing
Articles
Article 5(1)(c) and 6 of the GDPR andArticle 29(1) of the local Data Protection Law 125(I)2018

Publication of photographs of individuals in the printed form of "24h" newspaper

Following the publication of the photographs of three (3) of five (5) complainants in three (3) of the four (4) publications in news articles, the Commissioner ruled that there was a violation of the principle of data minimisation and that it was excessive in relation to the objective pursued, since the news could be published even without the photographs of the complainants. The publication of photographs does not serve the public interest in information and is not considered necessary under the principle of data minimisation. Furthermore, it does not convey any additional valuable public information. As the subject is of journalistic interest, the complainants' family business is still entitled to carry out public works, even after the criminal conviction of one of them on a relevant matter. Authority: News outlet/Publishing