Commissioner (Cyprus) - Online Platform “Agora”
Cyprus DPA fines MEP €6,000 for violating GDPR cooperation obligations.
The Cyprus Data Protection Authority (DPA) has fined a Member of the European Parliament (MEP) €6,000 for failing to cooperate with an investigation into his digital platform, "Agora." The platform processed sensitive data, including political opinions and biometric information, and the MEP initially refused to suspend its operation despite requests. The DPA found the MEP violated his obligation to cooperate under Article 31 of the GDPR, even without a prior determination of substantive non-compliance.
AI summary of the linked source. Not reviewed by an editor. How this works
Run Agora?
Get an email when a new story names Agora, usually within the hour.
Free. Your list stays private and never appears in a subject line. One click stops it. How Vendor Watch worksPrivacy
The lesson from this incident
Full lessonA Member of the European Parliament was fined €6,000 by the Cyprus DPA for failing to cooperate with a regulatory investigation into his 'Agora' platform, which processed highly sensitive data including political opinions and biometric information. The case highlights that GDPR obligations extend beyond data handling practices — organizations and controllers must actively engage with supervisory authorities when requested. Refusal to suspend operations or cooperate with investigations is itself a punishable violation under Article 31 of the GDPR, independent of any underlying substantive breach. This matters because non-cooperation undermines the entire regulatory framework designed to protect individuals' fundamental rights, and authorities will pursue enforcement even when the primary infringement is procedural.
What helps against this
How we list vendors- Compliance automation (GRC)
Evidence for NIS2, DORA and ISO 27001 is collected continuously, not in a rush before the audit.