[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fMBx_scJUijCRL2L7l7MEeoEhLM0MM1F-bocSJYQLMSY":3},{"article":4,"iocs":47,"watch_terms":48,"solutions":49,"lesson":52},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":25,"category":26,"article_tags":30},"bae4470f-dc1f-49e4-8c59-563c3ba94b6b","ΔΔΚ - 688\u002F2022","688-2022-51ab6d","Fixed link ← Older revision Revision as of 07:13, 16 September 2026 Line 7: Line 7: |Court_Original_Name=Διοικητικό Δικαστήριο Κύπρου |Court_Original_Name=Διοικητικό Δικαστήριο Κύπρου |Court_English_Name=Administrative Court of Cyprus |Court_English_Name=Administrative Court of Cyprus |Court_With_Country=ΔΔΚ (Cyprus) |Court_With_Country=Διοικητικού Δικαστηρίου (Cyprus) |Case_Number_Name=688\u002F2022 |Case_Number_Name=688\u002F2022","The Administrative Court of Cyprus upheld a €10,000 fine imposed on DIAS Media Group for disclosing a public figure's financial data. The court ruled that the media company failed to adequately balance journalistic interests with data protection rights, specifically concerning the accuracy and necessity of the published information.","Cyprus court upholds €10,000 fine against media company for GDPR violation.","https:\u002F\u002Fgdprhub.eu\u002Findex.php?title=%CE%94%CE%94%CE%9A_-_688\u002F2022&diff=53063&oldid=52022","https:\u002F\u002Fgdprhub.eu\u002Fimages\u002F4\u002F4c\u002FCourts_logo1.png","2026-09-16T07:13:04+00:00","2026-09-16T08:00:14.726099+00:00",7,[17,20,23],{"name":18,"type":19},"GDPR","product",{"name":21,"type":22},"DIAS Media Group","vendor",{"name":24,"type":19},"TV report","d95477d7-eb04-4fad-a2dc-be1428040ce7",{"id":25,"icon":27,"name":28,"slug":29},null,"Privacy Fines","privacy-fines",[31,35,40,45],{"category":32},{"id":33,"icon":27,"name":18,"slug":34},"3f0f8451-91df-4b6c-9a73-ef3b2509b7f1","gdpr",{"category":36},{"id":37,"icon":27,"name":38,"slug":39},"53f9c4b6-8bc6-4964-9169-d09e5cd41d72","Compliance","compliance",{"category":41},{"id":42,"icon":27,"name":43,"slug":44},"c5c77cdb-f7d7-4990-9436-c81dcbff1163","Policy","policy",{"category":46},{"id":25,"icon":27,"name":28,"slug":29},[],[21,18,24],{"controls":50,"vendors":51},[],[],{"slug":53,"title":54,"body":55,"framework_refs":56,"framework_notes":66},"cyprus-court-upholds-10000-fine-against-media-group-for-unlawful-disclosure-of-financial-data","Cyprus Court Upholds €10,000 Fine Against Media Group for Unlawful Disclosure of Financial Data","DIAS Media Group published a public figure's financial data without sufficiently balancing journalistic freedom against data protection obligations, resulting in a €10,000 fine upheld by the Administrative Court of Cyprus. The core failure was a lack of internal editorial and legal review processes to assess the accuracy, necessity, and proportionality of publishing sensitive personal data. This case illustrates that even journalistic entities are not exempt from GDPR-aligned data protection laws and must demonstrate a lawful basis for processing sensitive information. The ruling serves as a critical reminder that publishing personal financial data without rigorous justification exposes organizations to significant legal and financial liability.",[57,58,59,60,61,62,63,64,65],"GDPR Article 5 – Principles relating to processing of personal data (accuracy, data minimisation)","GDPR Article 6 – Lawfulness of processing","GDPR Article 85 – Processing and freedom of expression and information (journalistic exemption limits)","GDPR Article 35 – Data Protection Impact Assessment (DPIA)","NIST SP 800-53 AR-4 – Privacy Monitoring and Auditing","NIST SP 800-53 IP-1 – Consent","CIS Control 3 – Data Protection","ISO\u002FIEC 27001 Annex A.18.1 – Compliance with legal and contractual requirements","ITIL Service Design – Information Security Management",{}]