Regulatory Watch  /  Jurisdictions  /  European Union  /  Greece

GREECE

Regulators: Hellenic DPA

⚖️ Latest developments 🌐 Jurisdictions 📚 Law library
Laws that apply here
Also applies: European Union
Cyber Resilience Act Cyber Date not recorded Data Act Data governance In force since Sep 2025 Data Governance Act Data governance In force since Sep 2023 Digital Markets Act Platforms In force since May 2023 Digital Services Act Platforms In force since Feb 2024 ePrivacy Directive Privacy Date not recorded EU AI Act AI In force since Aug 2024 EU-U.S. Data Privacy Framework Transfers Date not recorded European Health Data Space Health Date not recorded General Data Protection Regulation Privacy In force since May 2018 Law Enforcement Directive Privacy In force since May 2018 NIS2 Directive Cyber In force since Oct 2024 Regulation (EU) 2018/1725 Privacy In force since Dec 2018 Standard Contractual Clauses Transfers Date not recorded
Developments
High Data protection authority action Decided Greece · Oct 8, 2026
Hellenic DPA fines Ministry and EETAA for data breach
The Hellenic Data Protection Authority issued a final decision on 28/07/2026 imposing administrative fines of EUR 200,000 on the Ministry of Social Cohesion and Family Affairs and EUR 150,000 on E.E.T.A.A. S.A. for security deficiencies.…
Hellenic Data Protection Authority · General Data Protection Regulation
Low Enforcement Filed Greece · Aug 13, 2024
Greek supermarket Alfa Vita faces GDPR complaint over incomplete data access
noyb filed a complaint with the Greek Data Protection Authority alleging that Alfa Vita's loyalty‑card program fails to provide full data‑subject access, omitting personal data and recipient information. The complaint cites a Court of…
Greek Data Protection Authority · General Data Protection Regulation
High Fine In effect Greece · Jul 13, 2022
Greek DPA fines Clearview AI €20 million and bans biometric processing
The Greek Data Protection Authority imposed a €20 million fine on Clearview AI and prohibited the company from processing biometric data of individuals in Greece. Clearview must delete all existing facial‑recognition data of Greek citizens…
Greek Data Protection Authority · General Data Protection Regulation
Coming up
No stated dates ahead.