Bernitsas

bernitsaslaw.com

Data Protection, Privacy & Cybersecurity

Tania Patsalia

Partner Tania is specialised in EU, competition and antitrust law, advising on all aspects of antitrust, merger control and State aid rules. She regularly assists clients with antitrust and competition law issues arising from their commercial arrangements and has been involved in high-profile cartel and merger control cases before the Hellenic Competition Commission. Tania provides clients with on-site assistance in dealing with dawn raids, including running workshops and mock exercises. Tania also advises on the application of EU law in Greece and the regulatory requirements applicable to the telecoms, media and technology sectors, regularly liaising with regulators such as the National Telecommunications and Post Commission, the National Council for Radio and Television, the Hellenic Data Protection Authority and the Hellenic Authority for Communication Security and Privacy. She has extensive experience in advising telecoms operators on licensing requirements, compliance with their annual reporting obligations and telecoms issues relating to the use of new technologies and the launch of new products and services. Tania also has an expertise in advising on all aspects of EU and Greek data privacy rules and she routinely advises clients on the proactive identification, assessment and management of risks associated with their privacy practices. She assists clients in GDPR compliance steps, and advises extensively on how to identify compliance gaps and draft privacy policies, consent forms and data processing agreements. Tania is an expert in AI and cybersecurity law, advising on their requirements and implications on data privacy and data protection and assisting clients in understanding the legal effects of AI on their business operations.

Nicole Markaki

Associate She advises companies on their compliance with applicable data protection rules including audits, data breaches, and privacy policies and liaises with regulatory authorities. Nicole often acts in due diligence and EU GDPR compliance assessment projects and reviews and drafts data processing agreements. She also advises on the regulatory requirements under EU and Greek telecommunications rules.

Eleni Kyratzi

Associate Eleni is an associate at the Firm and a member of the Data Protection, Privacy and Security & TMT team. She advises on all aspects of data privacy legislation, GDPR compliance, cybersecurity and regulatory matters. Eleni supports organisations with end-to-end GDPR compliance projects, including data mapping, audits and drafting compliance documentation (privacy notices, RoPAS, DPIAs, data processing agreements). She regularly advises on specialised matters, such as processing of employee data, cross-border data transfers and emerging technologies. Eleni assists clients with data breaches and cyber incident responses, including engagement with supervisory authorities. She also regularly participates in due diligence exercises in the context of M&As. She is a Certified Information Privacy Professional/Europe (CIPP/E) and a Certified Information Privacy Manager (CIPM).

Marina Androulakakis

Partner Marina is an expert in EU, competition and antitrust law. She joined the Firm in 1997 and advises national and international clients on antitrust, merger control and State aid issues, with substantial experience in cross-border and cross-section transactions, risk and strategy assessment and regulatory compliance. Her work includes FSR and FDI screening advice. Marina has extensive experience in successfully representing clients across various industries in alleged cartel and abuse of dominance cases before the Hellenic Competition Commission. She also has considerable expertise in merger cases and has effectively coordinated multi-jurisdictional filings and obtained clearance for high-profile M&A transactions from the Hellenic Competition Commission and the European Commission in a wide range of industry specialisations. Marina has an expertise in assessing commercial agreements and policies for their compliance with competition law and also provides on-site assistance and practical guidance in dealing with dawn raids. Marina has significant experience in advising clients on emerging and existing data protection requirements, including identifying gaps and areas of potential infringement of data protection laws, supporting clients on employment related privacy matters and advising on internal investigation procedures and data breach incidents. Marina also supports clients in relation to compliance with international sanctions regimes. Her work includes advising on sanctions monitoring and reporting requirements and the design and implementation of compliance programs, as well as assisting clients to obtain authorization from national authorities and liaising with the regulators.

Deals

- Data Privacy Aspects of the Sale of Tethys Portfolio Within the context of the sale of the first sectoral portfolio of loan claims sold in the secondary market in Greece, we advised Intrum Hellas, servicer and coordinator of the secondary sale and transfer, on data privacy issues, namely notice to data subjects.
- Cybersecurity and Data Breach Incident We advised a multinational apparel company in relation to a cybersecurity incident and on filing of a data breach notification to the Hellenic Data Protection Authority (HDPA).
- GDPR and Whistleblowing Compliance in Cosmetics Industry We advise a leading natural cosmetics company in relation to its GDPR compliance projects, including drafting and updating client’s privacy and cookies policies, assisting them in setting up an internal reporting system for EU law breaches and appointing an officer responsible for receiving and monitoring reports under this system, CCTV advice, as well as advice on consent forms and data processing agreements.

Team Services

Our practice advises all market participants on the increasingly complex legislation governing data privacy and security. We have extensive expertise in advising clients operating across a variety of industry sectors on emerging and existing data privacy requirements and are well positioned to address the new challenges resulting from the ongoing digital transformation. Our specialised privacy team is committed to offering practical, business-oriented advice, and to helping clients ensure compliance and manage risk.

We help companies to develop tailored compliance programs and policies, provide on-site and online employee training, including mock exercises, and work closely with clients to proactively mitigate data privacy and security risks. Our aim is to provide tailored services to assist our clients achieve their commercial and transactional goals within a complex legislative framework.