Greece Law 4624/2019 Chapter C - GDPR implementation specifics. CHILDREN AGE OF CONSENT (Article 21): age of consent for information society services set at 15 YEARS OLD (lower than GDPR default 16; using GDPR Art. 8(1) derogation); below 15 requires parental/guardian consent + verification mechanisms. EMPLOYEE PERSONAL DATA PROCESSING (Article 27): specific rules for employment context including (a) consent rebuttable + presumption against consent as lawful basis due to employer-employee power imbalance; (b) limited monitoring + transparency + necessity + proportionality; (c) biometric + genetic + health data restrictions; (d) background check + criminal record processing rules; (e) employee monitoring + electronic-communication surveillance restrictions; (f) data minimisation in employment lifecycle. PROCESSING FOR ARCHIVING + SCIENTIFIC RESEARCH + STATISTICAL PURPOSES (Article 30): specific Greek rules per GDPR Art. 89 including safeguards + DPIA + ethical-committee approval + data minimisation + anonymisation/pseudonymisation requirements; HDPA prior consultation for certain processing types. PROCESSING FOR JOURNALISTIC + ACADEMIC + ARTISTIC + LITERARY PURPOSES (Article 30): freedom-of-expression exemptions per GDPR Art. 85 + balancing-test against privacy rights + specific Greek provisions for media. DPO DESIGNATION (Article 6): mandatory DPO for public authorities + bodies + organisations with large-scale processing of special category data + criminal data + ongoing systematic monitoring; DPO independence + tasks + qualifications + reporting; notification to HDPA. RESTRICTIONS ON UNIQUE IDS (Article 24): see Chapter A description; covers AFM + AMKA + ID + passport + healthcare register IDs.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.