Law note · Greece
GDPR Article 22 and Law 4624/2019 Article 27, Data Subject Rights and Employment in Greece
General Data Protection Regulation (GDPR) Articles 12 to 23 apply, including Article 22 rights against a decision based solely on automated processing, restated without narrowing by Law 4624/2019.
Secondary commentary describes an employment chapter, commonly cited as Article 27, that makes employee consent lawful only in exceptional cases assessed against the employee's dependence in the employment relationship, and separately requires written notice to employees before workplace video surveillance is installed, limited to protection of persons and property.
This chapter's exact article numbers and text were not independently confirmed this pass, since two WebFetch attempts on the HDPA's own official translation PDF failed to extract readable text.
What it asks of an app
- Honor a person's request to access, rectify, erase, restrict, port, or object to processing of their personal data in Greece within one month of receipt.
- Provide a meaningful human review before finalizing any decision based solely on automated processing that produces legal or similarly significant effects for a person in Greece, under General Data Protection Regulation (GDPR) Article 22.
- Give written notice to an employee in Greece before installing workplace video surveillance, limited to protecting persons and property, per Law 4624/2019's employment chapter.
When LexLint raises it
Declared activities: crawls_web, trains_models, deploys_chatbot, automated_outreach, high_risk_decisions
Primary source: Secondary commentary (activeMind.legal, Metaxopoulos Law), not independently confirmed against Law 4624/2019's own text this pass