Greece Law 4624/2019 status + HDPA enforcement + adequacy + 2025+ European governance. HDPA ENFORCEMENT 2023-2025: numerous GDPR fines including major bank fines + telecom + retailer + healthcare + public sector enforcement; rising enforcement intensity + EDPB cooperation + cross-border one-stop-shop participation; significant cases on AI + cookies + employee monitoring + biometric data + retention + transparency. RECENT NOTABLE HDPA ACTIONS: (a) banking-sector fines for credit-data + customer profiling violations; (b) telecom fines for marketing without consent + data retention; (c) healthcare-sector fines for biometric + health-data breaches; (d) public-sector data leaks + HDPA enforcement against public bodies; (e) airline + tourism sector fines for cross-border transfers + customer data. EDPB COORDINATION: HDPA actively participates in EDPB plenaries + Working Groups + cross-border enforcement; led/joined multiple EDPB Guidelines + Opinions; one-stop-shop binding decisions on cases involving Greek-established controllers/processors. EU ADEQUACY + INTERNATIONAL TRANSFERS: Greek companies leverage GDPR + LEDP + adequacy + SCCs + BCRs for cross-border transfers; significant transfer-impact-assessment burden post-Schrems II; many companies adopting EU Data Privacy Framework (US) + APEC CBPR (separately tracked Global CBPR Forum). 2025+ EUROPEAN GOVERNANCE: EDPB + EDPS + national DPAs evolving toward more harmonised + binding decisions + enforcement + EU Digital Markets Act + EU Digital Services Act + EU AI Act + EU NIS2 + EU DORA + EU Data Act + EU DGA creating broader Greek regulatory environment; Greece participates in all + transposes as required; ongoing tensions between EU-level enforcement + national sovereignty. RECONCILIATION + REFORM PIPELINE: ongoing technical amendments to Law 4624/2019 + sectoral adaptations + integration with NIS2 + DORA + AI Act transpositions; possible consolidation of multiple Greek statutes into single Digital Code + ongoing administrative + judicial review of HDPA decisions shaping interpretation.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.