Personal data

This section sets out the legislation governing the protection of personal data at national and European level.

The legislation on the protection of personal data includes the General Data Protection Regulation (EU) 2016/679 (GDPR), Law 4624/2019, Law 2472/1997 as well as Law 3471/2006 in the field of electronic communications.

In particular, the GDPR was implemented as from 25/5/2018, in accordance with Article 99(2) thereof. According to Article 288 of the Treaty on the Functioning of the European Union, the GDPR is directly applicable to all Member States, which are required to take the necessary measures to adapt their national legislation.

By Law 4624/2019 (Government Gazette A137), measures are laid down for the implementation of the GDPR and Directive (EU) 2016/680 is incorporated into national legislation. Law 2472/1997 was repealed, except for the provisions specifically mentioned in article 84 of Law 4624/2019.

Law 3471/2006, which incorporates Directive 2002/58/EC (E-Privacy Directive), as amended by Directive 2006/136/EC, is complementary and specific to the institutional framework for the protection of personal data in the field of electronic communications.

European legislation on the protection of personal data include Article F of the Treaty on European Union, Article 8 of the Charter of Fundamental Rights of the European Union, Article 8 of the European Convention on Human Rights, Convention 108 of the Council of Europe and its modernisation.