ΔΔΚ - 688/2022
Cyprus court upholds €10,000 fine against media company for GDPR violation.
The Administrative Court of Cyprus upheld a €10,000 fine imposed on DIAS Media Group for disclosing a public figure's financial data. The court ruled that the media company failed to adequately balance journalistic interests with data protection rights, specifically concerning the accuracy and necessity of the published information.
AI summary of the linked source. Not reviewed by an editor. How this works
Run DIAS Media Group?
Get an email when a new story names DIAS Media Group, usually within the hour.
Free. Your list stays private and never appears in a subject line. One click stops it. How Vendor Watch worksPrivacy
The lesson from this incident
Full lessonDIAS Media Group published a public figure's financial data without sufficiently balancing journalistic freedom against data protection obligations, resulting in a €10,000 fine upheld by the Administrative Court of Cyprus. The core failure was a lack of internal editorial and legal review processes to assess the accuracy, necessity, and proportionality of publishing sensitive personal data. This case illustrates that even journalistic entities are not exempt from GDPR-aligned data protection laws and must demonstrate a lawful basis for processing sensitive information. The ruling serves as a critical reminder that publishing personal financial data without rigorous justification exposes organizations to significant legal and financial liability.