[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fkv-KJ8ktMOujOWirM15U5y2LbiyrA8adkjs2iPtAba8":3},{"article":4,"iocs":46,"watch_terms":47,"solutions":48,"lesson":51},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":23,"category":24,"article_tags":28},"afae2172-e4be-4d56-a4eb-b2c312a1188c","ΔΔΚ - 688\u002F2022","688-2022-efffc6","← Older revision Revision as of 07:47, 17 June 2026 Line 70: Line 70: }} }} A court upheld the DPA’s €10,000 fine against a media group over a TV report disclosing a public figure’s financial data, finding that it failed to properly balance journalistic freedom with data protection rights. A court upheld a €10,000 fine against a media company over a TV report disclosing a public figure’s financial data, finding that the media company failed to properly balance its journalistic interest with data protection rights. == English Summary == == English Summary == Line 85: Line 85: Accordingly, the DPA fined the controller €10,000 and ordered it to remove the publication from the websites of all entities controlled by it within one week. Accordingly, the DPA fined the controller €10,000 and ordered it to remove the publication from the websites of all entities controlled by it within one week. The controller challenged the decision before the Administrative Court of Cyprus. It argued, among other things, that the DPA had violated its right to freedom of expression and its exercise of journalistic freedom under [[Article 85 GDPR|Article 85 GDPR]]. The controller challenged the decision before the Administrative Court of Cyprus. It argued, among other things, that the DPA had violated its right to freedom of expression and its exercise of journalistic freedom under [[Article 85 GDPR]]. === Holding === === Holding ===","A Cypriot court has upheld a €10,000 fine imposed by the Data Protection Authority (DPA) on a media group. The fine was issued over a TV report that disclosed a public figure's financial data. The court found that the media company failed to adequately balance journalistic freedom with data protection rights.","Cyprus court upholds €10,000 fine against media group for disclosing financial data.","https:\u002F\u002Fgdprhub.eu\u002Findex.php?title=%CE%94%CE%94%CE%9A_-_688\u002F2022&diff=51895&oldid=51863","https:\u002F\u002Fgdprhub.eu\u002Fimages\u002F4\u002F4c\u002FCourts_logo1.png","2026-06-17T07:47:57+00:00","2026-06-17T08:00:25.385094+00:00",7,[17,20],{"name":18,"type":19},"Ekdotikos Oikos Dias Dimosia Ltd","vendor",{"name":21,"type":22},"Sigma TV channel","product","c5c77cdb-f7d7-4990-9436-c81dcbff1163",{"id":23,"icon":25,"name":26,"slug":27},null,"Policy","policy",[29,34,39,41],{"category":30},{"id":31,"icon":25,"name":32,"slug":33},"3f0f8451-91df-4b6c-9a73-ef3b2509b7f1","GDPR","gdpr",{"category":35},{"id":36,"icon":25,"name":37,"slug":38},"53f9c4b6-8bc6-4964-9169-d09e5cd41d72","Compliance","compliance",{"category":40},{"id":23,"icon":25,"name":26,"slug":27},{"category":42},{"id":43,"icon":25,"name":44,"slug":45},"d95477d7-eb04-4fad-a2dc-be1428040ce7","Privacy Fines","privacy-fines",[],[18,21],{"controls":49,"vendors":50},[],[],{"slug":52,"title":53,"body":54,"framework_refs":55,"framework_notes":64},"cypriot-court-upholds-10000-fine-for-unlawful-disclosure-of-financial-data-in-tv-broadcast","Cypriot Court Upholds €10,000 Fine for Unlawful Disclosure of Financial Data in TV Broadcast","A Cypriot media group failed to properly balance journalistic freedom against individuals' data protection rights, resulting in the unlawful broadcast of a public figure's financial information. The root cause was an inadequate internal review process to assess whether publishing personal financial data met the legal threshold of public interest journalism under GDPR principles. This case demonstrates that even media organizations are bound by data protection law and must implement editorial safeguards before airing sensitive personal data. Regulatory authorities are increasingly willing to enforce fines against media entities, signaling that 'journalistic privilege' is not a blanket exemption from data protection obligations.",[56,57,58,59,60,61,62,63],"GDPR Article 5 (Principles of data processing)","GDPR Article 6 (Lawfulness of processing)","GDPR Article 85 (Processing for journalistic and academic purposes)","NIST SP 800-53 PT-2 (Authority to Process Personally Identifiable Information)","NIST SP 800-53 PM-19 (Privacy Program Leadership)","CIS Control 3 (Data Protection)","ISO\u002FIEC 27001 Annex A.18.1 (Compliance with legal and contractual requirements)","ITIL Service Design – Compliance Management",{}]