[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fCuCI_1OIP6gTsfZkRvnIxvrRt9IgZYBrxzlWIjNwvVE":3},{"article":4,"iocs":46,"watch_terms":47,"solutions":48,"lesson":51},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":23,"category":24,"article_tags":28},"3ec0bf44-e5f5-47b1-b460-0d36c1dd5aec","Commissioner (Cyprus) - Online Platform “Agora”","commissioner-cyprus-online-platform-agora-061502","← Older revision Revision as of 07:40, 30 September 2026 Line 96: Line 96: }} }} The DPA fined an MEP €6,000 for failing to cooperate with the supervisory authority under [[Article 31 GDPR]], particularly, after he refused to fully comply with repeated requests to temporarily suspend the operations of his online platform \"Agora\". The DPA fined a Member of Parliament €6,000 for failing to cooperate with the DPA under [[Article 31 GDPR]], particularly, after he refused to fully comply with repeated requests to temporarily suspend the operations of his online platform \"Agora\". == English Summary == == English Summary ==","The Cypriot Data Protection Authority (DPA) has fined a Member of European Parliament (MEP) €6,000 for failing to cooperate with the authority. The MEP refused to fully comply with requests to temporarily suspend his online platform, \"Agora,\" which processed user identification via ID cards and biometric data, and allowed for the expression of political opinions. The DPA initiated an investigation after the platform's launch and requested a Data Protection Impact Assessment (DPIA), which was submitted incompletely, and the platform's operation was only partially suspended.","Cyprus DPA fines MEP €6,000 for non-cooperation regarding online platform 'Agora'.","https:\u002F\u002Fgdprhub.eu\u002Findex.php?title=Commissioner_(Cyprus)_-_Online_Platform_%E2%80%9CAgora%E2%80%9D&diff=53229&oldid=53195","https:\u002F\u002Fgdprhub.eu\u002Fimages\u002F5\u002F53\u002FLogoCY.jpg","2026-09-30T07:40:04+00:00","2026-09-30T08:00:16.224213+00:00",7,[17,20],{"name":18,"type":19},"Agora","product",{"name":21,"type":22},"biometric data analysis","technology","c5c77cdb-f7d7-4990-9436-c81dcbff1163",{"id":23,"icon":25,"name":26,"slug":27},null,"Policy","policy",[29,34,39,41],{"category":30},{"id":31,"icon":25,"name":32,"slug":33},"3f0f8451-91df-4b6c-9a73-ef3b2509b7f1","GDPR","gdpr",{"category":35},{"id":36,"icon":25,"name":37,"slug":38},"53f9c4b6-8bc6-4964-9169-d09e5cd41d72","Compliance","compliance",{"category":40},{"id":23,"icon":25,"name":26,"slug":27},{"category":42},{"id":43,"icon":25,"name":44,"slug":45},"d95477d7-eb04-4fad-a2dc-be1428040ce7","Privacy Fines","privacy-fines",[],[18],{"controls":49,"vendors":50},[],[],{"slug":52,"title":53,"body":54,"framework_refs":55,"framework_notes":64},"mep-fined-for-gdpr-non-compliance-over-biometric-data-platform","MEP Fined for GDPR Non-Compliance Over Biometric Data Platform","A Member of European Parliament was fined €6,000 by Cyprus's Data Protection Authority for failing to cooperate with regulatory oversight of his 'Agora' platform, which processed sensitive biometric data and political opinions without a complete Data Protection Impact Assessment (DPIA). Processing biometric data and political opinions represents a high-risk activity under GDPR, making a thorough DPIA mandatory before launch—not optional or partial. The MEP's refusal to fully comply with suspension requests compounded the violation, demonstrating that non-cooperation with supervisory authorities carries its own legal consequences. This case underscores that no individual or organization—regardless of political status—is exempt from data protection obligations when handling special category data.",[56,57,58,59,60,61,62,63],"GDPR Article 9 (Processing of special categories of personal data)","GDPR Article 35 (Data Protection Impact Assessment)","GDPR Article 58 (Powers of supervisory authorities)","GDPR Article 83 (General conditions for imposing administrative fines)","NIST Privacy Framework PR.PO-P1 (Policies, processes, and procedures for privacy risk management)","NIST SP 800-53 RA-3 (Risk Assessment)","CIS Control 18 (Penetration Testing \u002F Application Security — high-risk data handling processes)","ISO\u002FIEC 27701 Section 7.2.5 (Data Protection Impact Assessment)",{}]