Cypriot Court Upholds €10,000 Fine for Unlawful Disclosure of Financial Data in TV Broadcast
Written by AI from the linked story. Not reviewed by an editor. How this works
A Cypriot media group failed to properly balance journalistic freedom against individuals' data protection rights, resulting in the unlawful broadcast of a public figure's financial information. The root cause was an inadequate internal review process to assess whether publishing personal financial data met the legal threshold of public interest journalism under GDPR principles. This case demonstrates that even media organizations are bound by data protection law and must implement editorial safeguards before airing sensitive personal data. Regulatory authorities are increasingly willing to enforce fines against media entities, signaling that 'journalistic privilege' is not a blanket exemption from data protection obligations.
Tactical Insight
Immediate actions
- Establish a mandatory pre-broadcast legal and data protection review for any content involving personal financial, health, or sensitive data.
- Train editorial and production staff on the boundaries of journalistic exemptions under GDPR Article 85 and national media law.
Long-term improvements
- Appoint or consult a Data Protection Officer (DPO) to oversee editorial compliance with data protection regulations on an ongoing basis.
- Develop and enforce a formal Data Protection Impact Assessment (DPIA) process for investigative or sensitive reporting involving personal data.
- Create a documented editorial policy that defines clear criteria for when public interest justifies the disclosure of personal data.
Detection & governance measures
- Implement a post-publication review mechanism to identify and remediate any content that may have breached data protection standards.
- Maintain an audit log of data protection decisions made during the editorial process to demonstrate accountability to regulators.