Law 5321/2026, National AI Act Implementation Law
Law 5321/2026, arts. 3-5, 16, 23 (FEK A' 114/20.07.2026)
A citation is an address, not a summary. The first part names the law; what follows narrows it to the exact section, article or paragraph.
In force 58 days, effective 20 July 2026.
An AI transparency rule binding public and private bodies.
As of 6 September 2026.
What it requires
- Do not remove or interfere with the machine-readable marking your AI system embeds in synthetic audio, image, video, or text output under EU AI Act Article 50(1).
- Do not remove or interfere with a deployer's disclosure that content is a deepfake or has been artificially generated or manipulated, under EU AI Act Article 50(4); Law 5321/2026 makes doing so a crime in Greece.
If you get it wrong
Criminal exposureYes
Criminal exposure note
Removing the machine-readable marking on synthetic output, obstructing the AI system provider's technical labelling solution, or removing or obstructing a deployer's deepfake disclosure, is punished with imprisonment and a fine, unless the act is punished more severely under another provision (art. 23).
Who enforces it
Enforcement body
Hellenic Data Protection Authority (HDPA), designated the market surveillance authority under AI Act Article 70(1) for Article 5 prohibited-practice systems, Annex III high-risk systems, and Article 50 transparency systems, and the single point of contact under Article 70(2); the Hellenic Telecommunications and Post Commission (EETT) is the notifying authority under Article 28(1).
What it reaches
Obligation class
Content labelling
What this law does
Drafted with AI from the cited sources under the direction of UnGovr staff. UnGovr holds editorial responsibility for this page.
Article 3 designates the Hellenic Data Protection Authority (HDPA) as the market surveillance authority under AI Act Article 70(1) for systems within the Article 5 prohibited practices, the Annex III high-risk list, and the Article 50 transparency duties; Article 4 makes the HDPA the AI Act's single point of contact, and Article 5 names the Hellenic Telecommunications and Post Commission (EETT) as the notifying authority for conformity-assessment bodies.
Article 16 gives the HDPA and other market-surveillance authorities warning, reprimand, and Article 99 fining powers on top of the AI Act's own machinery, plus a periodic financial penalty of up to 2 percent of an undertaking's average daily worldwide turnover for continuing non-compliance.
Article 23 makes it a crime, punished by imprisonment and a fine unless a more severe provision applies, to remove or obstruct the machine-readable marking an AI system embeds in synthetic output under AI Act Article 50(1), or to remove or obstruct a deployer's disclosure under Article 50(4) that content is a deepfake or has been artificially generated or manipulated.
When LexLint raises it
generates_content