The Hellenic Data Protection Authority (HDPA) is responsible for supervising the implementation of the General Data Protection Regulation (GDPR), Law 4624/2019, Law 3471/2006 and other regulations concerning the protection of the individual from the processing of personal data, as well as the exercise of the duties assigned to it each time.
The Law establishing the HDPA, i.e. Law 2472/1997, has been repealed except for certain provisions expressly referred to in Article 84 of Law No 4624/2019.
It should be noted that Law 4624/2019 also includes the transposition into the Greek legal order of Directive (EU) 2016/680 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data by competent authorities for the purposes of preventing, investigating, detecting or prosecuting criminal offences or the enforcement of criminal penalties and on the free movement of such data and repealing Council Framework Decision 2008/977/JHA.
With Law 5321/2026 (‘Measures for the implementation of Regulation (EU) 2024/1689 of the European Parliament and of the Council of 13 June 2024 (Regulation on Artificial Intelligence) – Amendment of Law 4961/2022 (Government Gazette, Series I, No 146) and other provisions’, the Authority assumes a key supervisory role in ensuring compliance with the AI Act (Regulation (EU) 2024/1689), particularly with regard to prohibited practices, high-risk AI systems and transparency obligations.
