Greece Law 4624/2019 - Hellenic Data Protection Authority (HDPA) Implementation Act Art.27.1: Article 27(1), (4) to (6): process employee data only where strictly necessary for the employment contract

Employees' personal data (covering workers under any employment, work or service contract in the public and private sectors, applicants and former workers) may be processed for the employment contract where strictly necessary to decide whether to hire or to perform the contract, or on the basis of collective labour agreements that respect Article 88(2) GDPR; the employer takes appropriate measures to comply with the Article 5 GDPR principles, including for data not held in a filing system.