Law note · Cyprus
GDPR Articles 82-83 and ODPC Enforcement in Cyprus
cite Regulation (EU) 2016/679, Arts. 82-83
stage In effect
since 2018-05-25
reviewed 2026-08-24
The Office of the Commissioner for Personal Data Protection (ODPC) is the supervisory authority and enforces General Data Protection Regulation (GDPR) Article 83 fines. No Cyprus-specific fine ceiling beyond the GDPR Article 83 maximum, and no dedicated collective-redress statute, was identified in this pass. GDPR Article 82 gives any person who suffered material or non-material damage a right to compensation from the controller or processor.
What it asks of an app
- Expect the ODPC to have jurisdiction and fining power over your processing of personal data of a person in Cyprus, up to the General Data Protection Regulation (GDPR) Article 83 tiers.
- Expect any person who suffered material or non-material damage from an infringement to have a direct right to claim compensation from you as controller or processor, under GDPR Article 82.
When LexLint raises it
Declared activities: crawls_web, trains_models, deploys_chatbot, high_risk_decisions, processes_biometrics, processes_voice
Primary source: Official Journal text, EUR-Lex, Regulation (EU) 2016/679