LAW
Greece implemented the EU Data Protection Directive 95/46/EC in
October 1997 with Law 2472/1997 on the Protection of Individuals
with regard to the Processing of Personal Data, as amended
("Law"). Such law is currently in force
as amended by Laws 3471/2006 3783/2009. 3947/2011, 4024/2011 and
4070/2012.
Enforcement is through the Data Protection Authority
("DPA").
DEFINITION OF PERSONAL DATA
"Personal data" shall mean any information relating to
the data subject. Personal data is not considered to be the
consolidated data of a statistical nature where data subjects may
no longer be identified.
DEFINITION OF SENSITIVE PERSONAL DATA
"Sensitive data" shall mean the data referring to
racial or ethnic origin, political opinions, religious or
philosophical beliefs, membership of a trade union, health, social
welfare and sex life, criminal charges or convictions as well as
membership to societies dealing with the aforementioned areas.
