Law note · Greece
GDPR Articles 82-83 and HDPA Enforcement in Greece
The Hellenic Data Protection Authority (HDPA) is the supervisory authority and enforces General Data Protection Regulation (GDPR) Article 83 fines. In 2024 the HDPA issued an administrative fine and compliance order against the Ministry of Migration and Asylum, reported by the European Data Protection Board (EDPB)'s national news feed. No Greece-specific fine ceiling beyond the GDPR Article 83 maximum, and no dedicated collective-redress statute for data-protection claims, was identified in this pass.
GDPR Article 82 gives any person who suffered material or non-material damage a right to compensation from the controller or processor.
What it asks of an app
- Expect the Hellenic Data Protection Authority to have jurisdiction and fining power over your processing of personal data of a person in Greece, up to the General Data Protection Regulation (GDPR) Article 83 tiers.
- Expect any person who suffered material or non-material damage from an infringement to have a direct right to claim compensation from you as controller or processor, under GDPR Article 82.
When LexLint raises it
Declared activities: crawls_web, trains_models, deploys_chatbot, high_risk_decisions, processes_biometrics, processes_voice
Primary source: Official Journal text, EUR-Lex, Regulation (EU) 2016/679
EDPB national news feed, 2024 HDPA enforcement action against the Ministry of Migration and Asylum