GDPR Fines

A public record of GDPR enforcement across Europe — compiled by INPLP members

City Councilor of Aglantzia Municipality

Country
Cyprus
Fine
1,000 EUR
Date
2019-09-25
Sector
Municipality
Articles
Articles 5(1)(b) and 6(1)(a) of the GDPR

Unauthorised processing of personal data by City Councilor

Employees in the municipality, noticed that a list of their personal data (such as names, jobs and pay slips) had been leaked and distributed both in public places (e.g. café) and in places used by municipal officials (e.g. warehouses, canteens, etc.). The leak had a negative impact on the complainants, as the disclosure of their data and especially their pay slips was gossiped and despised/mocked by the villagers and others The City Council's act of handing over the list to an administrator of the Water Department for its own use amounts to further processing, which does not correspond to the original purpose of the list, which was that the City Council discussed in one of its meetings the workers who were to be transferred to the Nicosia Water Department. Authority: Municipality