Application to the HDPA for authorisation to transfer data to a country outside the EU

To submit an application to the HDPA for authorisation to transfer data outside the EU under Article 46(3) GDPR, the controller intending to transfer data outside the EU (data exporter) must fill in a special form and submit it electronically through the HDPA online portal.

The above electronic submission consists, in short, of the following steps:

The exporter must:

  1. Log in to the HDPA online portal under the option “Body”, using the credentials he/she has for taxisnet.
  2. Fill in the required fields of the electronic form “Request (for other uses)”.
  3. Fill in the category of request in the above form by selecting the option “4.Application for authorisation to transfer personal data to a country outside the EU (Art. 46(3))”.
  4. Attach one or more separate files to the above electronic form (preferably in word format) in connection with the following:
    1. a description of the subject of the application to be submitted to the HDPA;
    2. the text of the instruments involved (such as contractual clauses, administrative arrangements) that provide appropriate safeguards for the data subject; and
    3. any other documents directly related to the application.
  5. Submit the electronic form with all required attachments.

 

Exceptionally submit an application to the HDPA for authorisation to transfer data to a country outside the EU by e-mail

In case that, for any substantiated reason, you cannot log in to the HDPA online portal, you can submit the above application by e-mail. Please note, however, that you can only use this way as an exception, i.e. an alternative to submitting the application in question to the HDPA.

In this case, follow the steps outlined below:

  1. Fill in all required fields in the following controller/processor/body application form.

Controller/processor/body application form (docx / pdf).

 

  1. Fill in the category of request in the above form by selecting the option “4.Application for authorisation to transfer personal data to a country outside the EU (Art. 46(3))”.
  2. Send an e-mail to contact@dpa.gr with subject “Submission of an application to the HDPA for authorisation to transfer data to a country outside the EU”, attaching the following:
    1. The above form filled in.
    2. One or more separate files (preferably in word format) in connection with the following:
      1. a description of the subject of the application to be submitted to the HDPA;
      2. the text of the instruments involved (such as contractual clauses, administrative arrangements) that provide appropriate safeguards for the data subject; and
      3. any other documents directly related to the application.
    3. An outline of the reasons that have led you to submit the above application in this way rather than through the HDPA online portal.