Data protection sanctions and penalties in Greece
Criminal sanctions (Art. 38 of the Law 4624/2019)
Criminal sanctions are provided for violations of the GDPR or the laws implementing the GDPR. In particular, any act of authorized data processing may result in imprisonment of up to 10 years and fines of up to EUR 300,000.
Administrative sanctions (Art. 39 of the Law 4624/2019).
For violations of the GDPR or the laws implementing the GDPR, fines of up to ten million euros (EUR 10,000,000) are foreseen.
Public entities (Art. 39 (1) of the Law 4624/2019).
Public entities are not subject to penalties.
