Act 2019
Law 4624/2019 (Government Gazette A 137, 29.08.2019) — measures implementing the GDPR, transposing Directive (EU) 2016/680, and other provisions
Issued by Hellenic Data Protection Authority
Plain-English summary
Greece's national data protection act. It sets out the HDPA's investigative and corrective powers (Art. 15), limits on access rights and on the Article 34 GDPR notification duty (Art. 33) and administrative fines on public bodies of up to EUR 10,000,000 (Art. 39). The HDPA states that it repealed Law 2472/1997 except for provisions kept by Article 84.
Who it applies to
All industries
Topics
Data Protection & Privacy
Obligations arising from this law or regulation
| Obligation | Timing | Regulator | Source | Detail |
|---|---|---|---|---|
| Personal data breach notification to the HDPA | Deadline Within 72 hours where feasible | HDPA | official | |
The HDPA states that controllers must notify it without undue delay and, where feasible, within 72 hours of becoming aware of a breach that is likely to risk individuals' rights and freedoms, using its online form, and must record every breach internally. Where the risk is high, individuals must also be informed. |
||||
| No obligations match these filters. | ||||
Latest news
No related news yet. We publish updates as regulators act.