[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fl1JNS-RiKxZC7US1VKqALHxYGkcACQ20fKIZRWFcTEo":3},{"article":4,"iocs":47},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"full_text":11,"url":12,"image_url":13,"published_at":14,"ingested_at":15,"relevance_score":16,"entities":17,"category_id":24,"category":25,"article_tags":29},"afaecb05-6fde-4b1a-a376-353d4d9341bb","ΔΔΚ - 688\u002F2022","688-2022-d6d8a7","Minor amendement to 2nd paragraph of facts ← Older revision Revision as of 08:05, 17 June 2026 (One intermediate revision by the same user not shown) Line 75: Line 75: === Facts === === Facts === On 13 March 2019, Sigma, a Cypriot TV channel belonging to Ekdotikos Oikos Dias Dimosia Ltd, a Cypriot media group (the controller), published a report disclosing financial information concerning a public figure in Cyprus (the data subject). The publication was part of reporting on whether there had been favourable treatment of a politically exposed person. On 13 March 2019, Sigma, a Cypriot TV channel operated within DIAS Media Group (ΕΚΔΟΤΙΚΟΣ ΟΙΚΟΣ ΔΗΜΟΣΙΑ ΔΙΑΣ ΛΙΜΙΤΕΔ), published a report disclosing financial information concerning a public figure in Cyprus (the data subject). The DPA treated DIAS Media Group as the controller responsible for the publication. The report formed part of coverage on whether there had been favourable treatment of a politically exposed person. On 15 April 2019, the data subject lodged a complaint with the Cypriot DPA concerning the disclosure of their financial personal data by media outlets belonging to the controller’s group. On 15 April 2019, the data subject lodged a complaint with the Cypriot DPA concerning the disclosure of their financial personal data by Sigma and other media outlets belonging to the controller’s group. The DPA found that the controller had failed to properly balance the journalistic interest in publication against the data subject’s rights to privacy and data protection. In particular, the DPA considered that the controller had failed to demonstrate that it had taken into account certain balancing criteria, including whether the processing was carried out exclusively for journalistic purposes, whether it was strictly necessary to ensure the right to information on matters of public interest, whether the information was accurate and truthful, and whether there had been prior contact with the data subject. The DPA found that the controller had failed to properly balance the journalistic interest in publication against the data subject’s rights to privacy and data protection. In particular, the DPA considered that the controller had failed to demonstrate that it had taken into account certain balancing criteria, including whether the processing was carried out exclusively for journalistic purposes, whether it was strictly necessary to ensure the right to information on matters of public interest, whether the information was accurate and truthful, and whether there had been prior contact with the data subject.","A Cypriot court has upheld a €10,000 fine against DIAS Media Group for violating data protection laws. The media group published a TV report disclosing a public figure's financial data, failing to properly balance journalistic interest with the individual's privacy rights. The court agreed with the DPA that the company did not adequately consider criteria such as necessity, accuracy, and prior contact with the data subject.","Cyprus court upholds €10,000 fine against media company for privacy violation.","Help ΔΔΚ - 688\u002F2022: Difference between revisions From GDPRhub Jump to:navigation, search ← Older editVisualWikitext Revision as of 07:47, 17 June 2026 view sourceDs (talk | contribs)Bureaucrats, Interface administrators, noContributionReport, Administrators99 editsmTag: Visual edit← Older edit Latest revision as of 08:05, 17 June 2026 view source Ds (talk | contribs)Bureaucrats, Interface administrators, noContributionReport, Administrators99 editsm Tag: Visual edit (One intermediate revision by the same user not shown)Line 75: Line 75: === Facts ====== Facts === On 13 March 2019, Sigma, a Cypriot TV channel belonging to Ekdotikos Oikos Dias Dimosia Ltd, a Cypriot media group (the controller), published a report disclosing financial information concerning a public figure in Cyprus (the data subject). The publication was part of reporting on whether there had been favourable treatment of a politically exposed person.On 13 March 2019, Sigma, a Cypriot TV channel operated within DIAS Media Group (ΕΚΔΟΤΙΚΟΣ ΟΙΚΟΣ ΔΗΜΟΣΙΑ ΔΙΑΣ ΛΙΜΙΤΕΔ), published a report disclosing financial information concerning a public figure in Cyprus (the data subject). The DPA treated DIAS Media Group as the controller responsible for the publication. The report formed part of coverage on whether there had been favourable treatment of a politically exposed person. On 15 April 2019, the data subject lodged a complaint with the Cypriot DPA concerning the disclosure of their financial personal data by media outlets belonging to the controller’s group.On 15 April 2019, the data subject lodged a complaint with the Cypriot DPA concerning the disclosure of their financial personal data by Sigma and other media outlets belonging to the controller’s group. The DPA found that the controller had failed to properly balance the journalistic interest in publication against the data subject’s rights to privacy and data protection. In particular, the DPA considered that the controller had failed to demonstrate that it had taken into account certain balancing criteria, including whether the processing was carried out exclusively for journalistic purposes, whether it was strictly necessary to ensure the right to information on matters of public interest, whether the information was accurate and truthful, and whether there had been prior contact with the data subject.The DPA found that the controller had failed to properly balance the journalistic interest in publication against the data subject’s rights to privacy and data protection. In particular, the DPA considered that the controller had failed to demonstrate that it had taken into account certain balancing criteria, including whether the processing was carried out exclusively for journalistic purposes, whether it was strictly necessary to ensure the right to information on matters of public interest, whether the information was accurate and truthful, and whether there had been prior contact with the data subject. Latest revision as of 08:05, 17 June 2026 ΔΔΚ - 688\u002F2022 Court: ΔΔΚ (Cyprus) Jurisdiction: Cyprus Relevant Law: Article 5(1)(a) GDPR Article 5(1)(c) GDPR Article 5(1)(d) GDPR Article 85 GDPR Decided: 26.05.2026 Published: Parties: Ekdotikos Oikos Dias Dimosia Ltd Commissioner for Personal Data Protection National Case Number\u002FName: 688\u002F2022 European Case Law Identifier: Appeal from: Commissioner for Personal Data Protection4\u002F2\u002F2022 Appeal to: Unknown Original Language(s): Greek Original Source: CYLAW (in Greek) Initial Contributor: ds A court upheld a €10,000 fine against a media company over a TV report disclosing a public figure’s financial data, finding that the media company failed to properly balance its journalistic interest with data protection rights. Contents 1 English Summary 1.1 Facts 1.2 Holding 2 Comment 3 Further Resources 4 English Machine Translation of the Decision English Summary Facts On 13 March 2019, Sigma, a Cypriot TV channel operated within DIAS Media Group (ΕΚΔΟΤΙΚΟΣ ΟΙΚΟΣ ΔΗΜΟΣΙΑ ΔΙΑΣ ΛΙΜΙΤΕΔ), published a report disclosing financial information concerning a public figure in Cyprus (the data subject). The DPA treated DIAS Media Group as the controller responsible for the publication. The report formed part of coverage on whether there had been favourable treatment of a politically exposed person. On 15 April 2019, the data subject lodged a complaint with the Cypriot DPA concerning the disclosure of their financial personal data by Sigma and other media outlets belonging to the controller’s group. The DPA found that the controller had failed to properly balance the journalistic interest in publication against the data subject’s rights to privacy and data protection. In particular, the DPA considered that the controller had failed to demonstrate that it had taken into account certain balancing criteria, including whether the processing was carried out exclusively for journalistic purposes, whether it was strictly necessary to ensure the right to information on matters of public interest, whether the information was accurate and truthful, and whether there had been prior contact with the data subject. The DPA held that, by publishing information concerning the data subject’s financial situation, the controller had infringed the principles of lawfulness, fairness and transparency, data minimisation and accuracy. Therefore, it found that the controller infringed Article 5(1)(a) GDPR, Article 5(1)(c) GDPR and Article 5(1)(d) GDPR. Accordingly, the DPA fined the controller €10,000 and ordered it to remove the publication from the websites of all entities controlled by it within one week. The controller challenged the decision before the Administrative Court of Cyprus. It argued, among other things, that the DPA had violated its right to freedom of expression and its exercise of journalistic freedom under Article 85 GDPR. Holding The court found that the DPA had not violated the controller’s freedom of expression or journalistic freedom. It determined that the DPA had examined whether the controller had exceeded what was necessary for the journalistic purpose pursued. The court held that the DPA had sufficiently explained how journalistic freedom must be balanced against the principle of proportionality. It confirmed the DPA’s conclusion that the controller had failed to carry out properly that balancing. The court dismissed the appeal and upheld the DPA’s decision. It also awarded €2,000 in costs against the controller. Comment Share your comments here! Further Resources Share blogs or news articles here! English Machine Translation of the Decision The decision below is a machine translation of the Greek original. Please refer to the Greek original for more details. CYPRUS BAR ASSOCIATION Search - List of Administrative Court Decisions - Display Reports (Noteup on) - Remove Underlining ADMINISTRATIVE COURT (Case No. 688\u002F2022) 26 May 2026 [MICHAEL, D\u002Fat D.D.] DIAS PUBLISHING HOUSE LIMITED Applicant v. OF THE REPUBLIC OF CYPRUS, THROUGH THE PERSONAL DATA PROTECTION COMMISSIONER In whose name the Application .......... S. A. Angelides for Andreas S. Angelides D.E.P.E., for the applicant. Th. Piperi - Christodoulou (Ms.) for Attorney General, for the defendant in the application. DECISION MICHAEL, D.D.D.: The applicant, with the present appeal, requests the annulment of the decision of the defendant in the application dated 4.2.2022, by which it ruled that the applicant violated Articles 5(1)(a), (c) and (d) of Regulation (EU) 2016\u002F679 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (hereinafter the \"General Regulation\") and imposed on the applicant an administrative fine of €10,000. On 15.4.2019, a person submitted a written complaint to the respondent regarding the publication of personal data by mass media belonging to the applicant's group. By letter dated 28.5.2019, the respondent requested the applicant to submit its positions, which it di","https:\u002F\u002Fgdprhub.eu\u002Findex.php?title=%CE%94%CE%94%CE%9A_-_688\u002F2022&diff=51899&oldid=51895","https:\u002F\u002Fgdprhub.eu\u002Fimages\u002F4\u002F4c\u002FCourts_logo1.png","2026-06-17T08:05:49+00:00","2026-06-17T10:00:11.63713+00:00",7,[18,21],{"name":19,"type":20},"DIAS Media Group","vendor",{"name":22,"type":23},"Sigma","product","c5c77cdb-f7d7-4990-9436-c81dcbff1163",{"id":24,"icon":26,"name":27,"slug":28},null,"Policy","policy",[30,35,40,42],{"category":31},{"id":32,"icon":26,"name":33,"slug":34},"3f0f8451-91df-4b6c-9a73-ef3b2509b7f1","GDPR","gdpr",{"category":36},{"id":37,"icon":26,"name":38,"slug":39},"53f9c4b6-8bc6-4964-9169-d09e5cd41d72","Compliance","compliance",{"category":41},{"id":24,"icon":26,"name":27,"slug":28},{"category":43},{"id":44,"icon":26,"name":45,"slug":46},"d95477d7-eb04-4fad-a2dc-be1428040ce7","Privacy Fines","privacy-fines",[]]