Decentralized Administration of the Aegean

What happened

The Hellenic DPA upheld a complaint against the Decentralized Administration of the Aegean after finding that it had unlawfully published the complainant's name in eleven decisions uploaded to the Diavgeia transparency portal. The Authority concluded that the publication lacked a valid legal basis under the GDPR, violated the complainant's right to erasure, ordered the removal of the decisions from Diavgeia, and imposed a €2,000 administrative fine.

Summary from GDPRhub (noyb), written by its volunteers, not by Fino. CC BY-NC-SA 4.0.

Rules involved

• Art. 5Principles relating to processing of personal data5(1)(a)Read →
• Art. 6Lawfulness of processing6(1)(c)Read →
• Art. 17Right to erasure (‘right to be forgotten’)17(1)(d)Read →

• Data principles
• Data subject rights
• Unlawful processing