Continue reading on DataGuidance with:
Free Member
Limited ArticlesCreate an account to continue accessing select articles, resources, and guidance notes.
Already have an account? Log in
Cyprus: Commissioner fines doctor €1,500 for unlawful CCTV installation
The Office of the Commissioner for Personal Data Protection ('the Commissioner') published, on 14 July 2022, its decision, as issued on 31 March 2022, in which it fined a doctor for violations of Articles 6 and 31 of the General Data Protection Regulation (Regulation (EU) 2016/679) ('GDPR'), following complaint submitted by an individual.
Background to the decision
In particular, the Commissioner outlined that the complaint concerned the doctor's installation and operation of CCTV in the common waiting area of two surgeries.
Findings of the Commissioner
Following investigation, the Commissioner found that the CCTV captured images from the waiting area, as well as the street and sidewalk outside the building, without a legal basis, thereby violating Article 6(1) of the GDPR. Additionally, the Commissioner found that the doctor further violated Article 31 of the GDPR because of their failure to respond to the Commissioner in a timely manner.
Outcomes
As a result, the Commissioner issued a reprimand to the doctor and fined the same €1,500 for the aforementioned violations.
You can read the press release here and the decision here, both only available in Greek.