Greece fined for AI-powered asylum centre monitoring systems

The Greek Ministry of Migration and Asylum was fined EUR 175,000 for incorrectly developing and installing two surveillance systems at asylum centres on the Aegean islands.

Centaur is an integrated digital Electronic and Physical Security management system that uses cameras, drones and motion analysis algorithms to control reception and hospitality structures for third-country citizens on the Aegean islands. 

Another system, Hyperion, is described as an integrated entry-exit control system. Asylum seekers, certified members of NGOs and other guests present cards read by an RFID [Radio Frequency Identification] reader combined with a fingerprint through which personal data and biometric data are processed. 

The Greek Data Protection Authority (DPA) found that there was deficient cooperation on the part of the ministry as the Controller. It further considered that the required Data Protection Impact Assessments carried out by the ministry were incomplete and constituted serious omissions regarding the ministry’s compliance with specific provisions of the European Union's GDPR regarding implementation of disputed systems.

Both systems received funding from the European Union. The fine is the largest imposed on a Greek public body to date.

Regulation ⚖️

• EU General Data Protection Regulation

Legal, regulatory 👩🏼‍⚖️

• Hellenic Data Protection Authority (2024). Ministry of Migration and Asylum receives administrative fine and GDPR compliance order following an own-initiative investigation by the Hellenic Data Protection Authority

• Hellenic Data Protection Authority (2024). Διοικητικό πρόστιμο και εντολή για συμμόρφωση με τον ΓΚΠΔ στο ΥMΑ στο πλαίσιο αυτεπάγγελτης έρευνας της Αρχής

Research, advocacy 🧮

• European Parliament (2022). Question for written answer E-003094/2022

• Homo Digitalis (2024). The Hellenic Data Protection Authority fines the Ministry of Migration and Asylum for the "Centaurus" and "Hyperion" systems with the largest penalty ever imposed to a Greek public body

• Homo Digitalis (2022). A major success for civil society in Greece: The Hellenic DPA launches an investigation into the Ministry of Immigration and Asylum re the YPERION and KENTAYROS IT systems

• Statewatch (2023). Europe's techno-borders

News, commentary, analysis 🗞️

• https://balkaninsight.com/2024/04/03/greek-ministry-fined-over-surveillance-systems-at-asylum-centres/

• https://www.lexology.com/pro/content/greek-regulator-fines-ministry-over-surveillance-systems

• https://pulitzercenter.org/stories/greek-data-watchdog-rule-ai-systems-refugee-camps

• https://algorithmwatch.org/en/greek-camps-surveillance/

• https://wearesolomon.com/mag/focus-area/accountability/asylum-surveillance-systems-launched-in-greece-without-data-safeguards/