Data Protection and Privacy 2025

GREECE Law and Practice Contributed by: Natasha Mezini, Lambros Katsiamagkos and Jenny Georgountzou, Psarras, Georgountzou, Gavrilis - GKP Law Firm

Parliament and of the Council of 15 March 2006 on the retention of data generated or processed in connection with the provision of publicly available electronic communica - tions services or of public communications networks. • Law 4727/2020 transposes the provisions of Directives (EU) 2016/2102, 2019/2024 and 2018/1972 on electronic communications. • Law 5002/2022 on the privacy of communi - cations and cybersecurity, aims to protect the confidentiality of communications from surveillance and monitoring. • Law 5169/2025 ratifying the Protocol amend - ing the Convention for the Protection of Indi - viduals with regard to Automatic Processing of personal data. • Regulatory acts and guidelines issued by the competent authorities. • Lastly, the competent, independent Authori - ties, such as the HDPA and the Hellenic Authority for Communication Security and Privacy, issue regulatory acts and guidelines. 1.2 Regulators The Hellenic Data Protection Authority (HDPA) Areas of jurisdiction The HDPA has control powers, as well as cor - rective, advisory and licensing powers, as speci - fied and analysed in Article 58 of the GDPR and in Article 15 of Law 4624/2019. Analytically, the HDPA: • monitors the implementation and enforce - ment of the GDPR, Law 4624/2019 and other regulations concerning the protection of indi - viduals from the processing of personal data; • contributes to the consistent application of the GDPR throughout the Union and, for this purpose, cooperates with the supervisory

authorities of the EU Member States and with the Commission; • promotes public awareness of personal data protection issues and the obligations of con - trollers and processors; • provides opinions on any regulation to be included in a law or regulatory act concerning data processing; • issues instructions and makes recommenda - tions on any matter concerning data process - ing; • provides, upon request, information to data subjects regarding the exercise of their rights; • handles complaints submitted for violation of the provisions of the GDPR; • conducts investigations or audits regarding the implementation of personal data protec - tion legislation; • encourages the development of codes of conduct and approves codes of conduct that provide adequate safeguards; • encourages the establishment of data pro - tection certification mechanisms and data protection seals and marks, approves certifi - cation criteria; • cooperates with other supervisory authorities through the exchange of information aiming for a more consistent application of the GDPR throughout the EU; and • it shall contribute to the activities of the EDPB. The Hellenic Authority for Communication Security and Privacy (ADAE) Areas of jurisdiction The ADAE is responsible for monitoring the implementation of all legislation relevant to the lawful interception of communications. Analyti - cally, the ADEA: issues regulations regarding the assurance of the confidentiality of communications;

151 CHAMBERS.COM

Powered by