Support Centre

You have out of 5 free articles left for the month

Signup for a trial to access unlimited content.

Start Trial

Continue reading on DataGuidance with:

Free Member

Limited Articles

Create an account to continue accessing select articles, resources, and guidance notes.

Free Trial

Unlimited Access

Start your free trial to access unlimited articles, resources, guidance notes, and workspaces.

Cyprus: Commissioner fines doctor €1,500 for unlawful CCTV installation

The Office of the Commissioner for Personal Data Protection ('the Commissioner') published, on 14 July 2022, its decision, as issued on 31 March 2022, in which it fined a doctor for violations of Articles 6 and 31 of the General Data Protection Regulation (Regulation (EU) 2016/679) ('GDPR'), following complaint submitted by an individual.

Background to the decision

In particular, the Commissioner outlined that the complaint concerned the doctor's installation and operation of CCTV in the common waiting area of two surgeries.

Findings of the Commissioner

Following investigation, the Commissioner found that the CCTV captured images from the waiting area, as well as the street and sidewalk outside the building, without a legal basis, thereby violating Article 6(1) of the GDPR. Additionally, the Commissioner found that the doctor further violated Article 31 of the GDPR because of their failure to respond to the Commissioner in a timely manner.


As a result, the Commissioner issued a reprimand to the doctor and fined the same €1,500 for the aforementioned violations.

You can read the press release here and the decision here, both only available in Greek.