HDPA - 3/2020
|HDPA - 3/2020|
|Relevant Law:||Article 15 GDPR
Article 12 L. 2472/1997 (Former national law on data protection)
|Decided:||26. 2. 2020|
|Parties:||Golf Centre of the Municipality of Glyfada|
|National Case Number:||3/2020|
|European Case Law Identifier:||n/a|
|Original Source:||HDPA (GR)|
The HDPA imposed a 5,000 EUR fine on a municipal golf centre for violation of a data subject's right of access under the data protection legislation prior to the GDPR.
The complainant asked copy of video records from the video surveillance system that the Golf Centre of the Municipality of Glyfada (data controller) operated. The records he asked included incident with the complainant and an employee of the Centre. The data controller did not response and the complainant sent his request again. The data controller did not response and the complainant sent the request for a third time, this time asking for all documents concerning him. The data controller responded too late and not in the e-mail address the complainant had indicated.
The HDPA found that the alleged violation took place prior to the GDPR and that it does not qualify a continuing infringement, thus the former Law 2472/1997 should be applicable.
The HDPA found that the data controller had not notified the authority of the video surveillance system as it had to and that it did not comply with its duty to respond to the complainant's access request. Thus, it imposed a fine of EUR. 5,000.
Share your comments here!
Share blogs or news articles here!
English Machine Translation of the Decision
There is no available machine translated decision. Please refer to the Greek original decision for details.