Data Protection & Cybersecurity
Overview
Papatriantafyllou & Thanasenari advises and represents Greek and international businesses, organisations and private clients in data protection and cybersecurity matters in Greece. Based in Athens, we combine regulatory advice with support in data breaches, investigations and disputes.
Our team’s credentials include the IAPP’s CIPP/E, CIPM and CIPT certifications and the Fellow of Information Privacy (FIP) designation, as well as membership of the European Data Protection Board’s pool of experts.
Data Protection
We advise on compliance with the General Data Protection Regulation (GDPR) and Greek data protection law. Our work includes compliance reviews, support for Data Protection Officers (DPOs), staff training and legal opinions on complex data protection issues.
We also advise on data protection matters arising in corporate transactions, anti-money laundering compliance and the operation of digital platforms, including obligations under the Digital Services Act. Our advice takes account of how clients collect, use and share personal data, and the legal risks arising from those activities.
Cybersecurity & Incident Response
We advise on cybersecurity obligations under Greek and EU law, including the Greek framework implementing NIS2 and the Digital Operational Resilience Act (DORA), where applicable. Our work covers the legal aspects of risk management, internal policies, incident reporting and arrangements with technology service providers.
When a cyber incident or personal data breach occurs, we advise on the immediate legal response, including notification requirements, such as the GDPR’s 72-hour deadline, and communications with regulators and those affected. We coordinate with clients’ technical teams and other advisers as needed.
Cybersecurity & Incident Response
We represent businesses, organisations and private clients in complaints, investigations and disputes concerning the processing or security of personal data. Our work includes proceedings before the Hellenic Data Protection Authority and the Greek courts, as well as advice on potential liability and claims for compensation.
For more information, read our relevant Guide in Greek: