Greece Law 4624/2019 2024-2025 regulatory pipeline + EU integration. NIS2 TRANSPOSITION (deadline 17 October 2024 + Greek law expected 2024-2025): Directive (EU) 2022/2555 NIS2 transposition into Greek law expanding cybersecurity scope from NIS1 to 18 critical sectors covering ~5,000+ Greek entities; enhanced security measures + supply chain security + ICT-related incident notification (24-hour early warning + 72-hour notification + 1-month final report); executive accountability + GREEK NCSA enforcement; coordinates with Greek Cybersecurity Authority + HDPA on personal data breach notifications. DORA TRANSPOSITION (Regulation (EU) 2022/2554 - directly applicable 17 January 2025): Digital Operational Resilience Act for financial entities + ICT risk management + ICT third-party risk + cyber incident reporting + digital operational resilience testing + Greek financial-services sectoral implementation by Bank of Greece + HCMC (Hellenic Capital Market Commission) + interaction with HDPA on personal data. AI ACT TRANSPOSITION (Regulation (EU) 2024/1689 - effective phased 2024-2027): EU AI Act direct applicability with Greek national notified bodies + market surveillance + sectoral coordination; Greek AI Act implementation framework + Notified Bodies + interactions with HDPA on personal data + DPIA + AI-specific transparency. EU DATA ACT (Regulation (EU) 2023/2854): IoT + connected products + B2B + B2C data access + portability + interoperability; effective September 2025 + Greek sectoral implementation. EU DATA GOVERNANCE ACT (DGA): personal-data altruism + data intermediaries + EU registers + Greek Data Innovation Hub + HDPA coordination. EU WHISTLEBLOWER DIRECTIVE 2019/1937 (transposed via Law 4990/2022): ongoing implementation + HDPA enforcement of reporter + reported person data. EU CHIPS ACT + CONNECTING EUROPE FACILITY 2 + DIGITAL EUROPE PROGRAMME + RECOVERY AND RESILIENCE FACILITY (RRF) - Greek digital + cybersecurity + AI investment programmes. HDPA ENFORCEMENT ACTIONS (2024-2025): increasing GDPR fines + sectoral focus including banks + telecoms + retailers + healthcare + public bodies + insurance + media. EU ADEQUACY + INTERNATIONAL: Greek companies leverage GDPR + LEDP + adequacy decisions for cross-border transfers; Schrems II compliance; SCC + BCR adoption; CBPR/Global CBPR Forum participation potential.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.