On Monday 23/9 the Hellenic Data Protection Authority (DPA) issued Decision 32/2024, which relates to the new identity cards for Greek citizens.
The Authority found deficiencies regarding the provision of general information to data subjects, and further found that the required data protection impact assessment was carried out late and deficient. For these reasons, it imposed an administrative fine of EUR 150,000 on the Ministry of Citizen Protection, as controller, for the above infringements, while at the same time it issued a compliance order to the Ministry within six months. Finally, the Authority pointed out the obligation to update and codify the legal framework regarding the details of the new type of identity cards for Greek citizens.
The Decision 32/2024 of the Hellenic Data Protection Authority is available here.
The Homo Digitalis team has prepared a short explanatory video in plain language to highlight some important points of this Decision.
The video is available here.