fineConcluded€175,000
Hellenic Data Protection Authority (HDPA) — Ministry of Migration and Asylum
April 3, 2024 · Greece
The HDPA fined the Ministry EUR 175,000 with a compliance order over the 'Centaur' (AI behavioural-analytics cameras, drones, CCTV) and 'Hyperion' (RFID + fingerprint biometric entry-exit) surveillance systems at reception centres on five Aegean islands, finding the DPIAs substantially incomplete.
Key takeaway — how to prevent this
Biometric data (faces, iris, fingerprints) needs an explicit lawful basis or consent. Scraping or capturing it without one is unlawful across the EU/UK and many US states (e.g. Illinois BIPA) — and draws the largest fines.
Inclusion does not imply wrongdoing or liability. Status reflects the latest information we have — always check the official source for current status.