Data, Privacy & Cybersecurity

After years of leadership in Data Protection, Privacy and Cybersecurity Law in the Health sector, our firm understands the increased complexity of data driven business models. We help clients map the risks associated with the processing of personal data, maintain compliance of international data transfers under Chapter V of the GDPR and the EDPB Recommendations 01/2020 on supplementary measures, and earn stakeholder trust in the lawful use of personal data. We deliver Data Protection Impact Assessments under Article 35 GDPR, Records of Processing Activities under Article 30 GDPR, Data Processing Agreements under Article 28 GDPR and DPO advisory services. Our practice covers Directive (EU) 2022/2555 (NIS2) and its national implementation under Law 5160/2024, Regulation (EU) 2024/2847 (Cyber Resilience Act), Regulation (EU) 2022/2554 (DORA) for financial sector clients and breach notification obligations under Articles 33 and 34 GDPR. We advise on incidents of unauthorised disclosure and identity theft, on coordinated forensic investigations, on engagement with the Hellenic Data Protection Authority and on supervisory negotiations and ongoing remediation. We further advise on the Data Act under Regulation (EU) 2023/2854, on the AI Act for personal data processing in AI systems and on Greek Law 4624/2019.