GREECE ADOPTS LEGISLATION IMPLEMENTING THE AI ACT: A PIVOTAL ROLE FOR THE DATA PROTECTION AUTHORITY WITHIN THE NEW REGULATORY FRAMEWORK
In July 2026, Greece adopted Law 5321/2026 (“the Law”) which introduced measures implementing Regulation (EU) 2024/1689 (“AI Act”). In line with the AI Act, the Law aims to establish an appropriate framework for achieving the effective supervision of Artificial Intelligence Systems, to ensure a high level of protection of health, safety and fundamental rights in the use of such systems, and support innovation. In particular, the Law designates, for the purposes of the AI Act, the market surveillance authorities, the single point of contact and the notifying authorities, and regulates issues relating to cooperation and coordination between the competent authorities. Moreover, the Law governs issues pertaining to AI regulatory sandboxes and testing of AI systems in real world conditions. With regards to infringements of the AI Act and the Law, effective, proportionate and dissuasive penalties are determined, while provisions relating to judicial protection and the exercise of the right to appeal against decisions issued pursuant to the AI Act and the Law are also included. In the above regulatory framework, the Hellenic Data Protection Authority is assigned a particularly important and multifaceted role.
28 September 2026
