GREECE Law and Practice Contributed by: Natasha Mezini, Lambros Katsiamagkos and Jenny Georgountzou, Psarras, Georgountzou - GKP Law Firm
cessing of personal data, and applies to the extent that a few of its articles remain in force. • Law 3471/2006 provides for the protection of privacy and personal data in electronic communi - cations. • Law 3674/2008 provides for the necessary meas - ures that must be applied by the providers of electronic communications networks and services to safeguard the safety and privacy of communica - tions. • Law 3917/2011 transposes the provisions of Direc - tive (EU) 2006/24/EC of the European Parliament and of the Council of 15 March 2006 on the reten - tion of data generated or processed in connection with the provision of publicly available electronic communications services or of public communica - tions networks. • Law 4727/2020 transposes the provisions of Direc - tives (EU) 2016/2102, 2019/2024 and 2018/1972 on electronic communications. • Law 5002/2022 on the privacy of communications and cybersecurity aims to protect the confiden - tiality of communications from surveillance and monitoring. • Law 5086/2024 establishes the National Cyberse - curity Authority. • Law 5099/2024 incorporates Regulation (EU) 2022/2065 of the European Parliament and of the Council of 19 October 2022 on a Single Market For Digital Services (the Digital Services Act) and designates the HDPA as the competent author - ity for supervising providers of intermediary ser - vices, enforcing Article 26 paragraphs 1 and 3 of the Regulation regarding user information on the display and targeting of advertisements, and Article 28 concerning the protection of minors’ personal data. • Law 5160/2024 incorporating Directive (EU) 2022/2555 of the European Parliament and the Council of 14 December 2022 on measures for a high common level of cybersecurity across the Union (NIS2). • Law 5169/2025 ratifying the Protocol amending the Convention for the Protection of Individuals with regard to Automatic Processing of personal data. • Regulatory acts and guidelines issued by the com - petent authorities.
• Lastly, the competent, independent authorities, such as the HDPA and the Hellenic Authority for Communication Security and Privacy, issue regula - tory acts and guidelines. 1.2 Rights and Obligations GDPR General Principles The GDPR sets the following general principles for the processing of personal data, which safeguard the fun - damental rights of the natural persons, including their protection from the processing of their personal data: • “lawfulness, fairness and transparency” – the pro - cessing of personal data must be lawful, legitimate and carried out in a transparent manner; • “purpose limitation” – personal data must be collected for an explicit, specified and legitimate purpose and the processing must be compatible with such purpose; • “data minimisation” – personal data must be adequate, relevant and limited to what is strictly necessary for the fulfilment of the purpose for which it is processed; • “accuracy” – personal data must be accurate and kept up to date, and measures must be taken to rectify inaccurate data; • “storage limitation” – personal data must be retained only for as long as necessary to fulfil the purpose of processing; and • “integrity and confidentiality” – personal data must be processed securely and in a manner that pro - tects it against unauthorised or unlawful process - ing, loss or destruction. Data Subjects’ Rights Chapter II of the GDPR sets out the rights of data subjects, which safeguard their fundamental freedoms regarding the processing of their personal data: • Article 15 establishes the right of access, mean - ing that the data subject has the right to obtain confirmation from the data controller as to whether or not their personal data is being processed and, if so, to access such personal data and receive a copy thereof; • Articles 16 and 17 establish the right to rectifica - tion or erasure, meaning that the data subject may request the correction of their personal data that
132 CHAMBERS.COM
Powered by FlippingBook