ANA-MPA -- The Authority for the Protection of Personal Data on Friday imposed its maximum fine of 150,000 euros on the finance ministry's General Secretariat for Information Systems after discovering a massive leak of sensitive information affecting almost every tax-payer in Greece.
The authority found that the secretariat had failed to take adequate security measures to prevent the leak taking place.
The fine is the culmination of an investigation launched in October 2012, after inspections of companies trading in personal data revealed that many had gained access to sensitive personal tax details of large numbers of individual tax-payers, with the evidence pointing to the General Secretariat of Information Systems as a likely source.
Among the personal tax details that had been leaked were all E1 income tax declarations for the years 2003-2009 and part of 2012, the E2 forms for the year 2006, parts of the E9 form on property assets, information on the ETAK property tax and the emergency levy of 2011, the tax payers register, vehicle circulation fees for 2006 until 2012 and tax settlement notes for 2010.
According to the Authority for Personal Data, the secretariat has yet to be equipped with adequate security measures to prevent illegal access to the large volume of extremely sensitive information that it handles, nor means to detect and investigate such violations when they occur.