National Cybersecurity Requirements Framework Adopted: Key Requirements And Responsibilities For Essential And Important Entities

Our Data Privacy, Cybersecurity and Technology Briefing aims to update businesses of recent developments in the field of cybersecurity in Greece and provide key takeaways that you need to know, including:

A. Introduction

1. Greece adopted a new set of cybersecurity requirements complementing in essence the provisions of the Greek Cybersecurity Law (Law 5160/2024)¹ by means of Joint Ministerial Decision 1689/2025 (JMD)².
2. The JMD establishes the national cybersecurity framework for essential and important entities³ in Greece (the National Cybersecurity Requirements Framework). It aims to set out technical, organisational, and operational measures for risk management, security policies, control and evaluation procedures, and obligations involving management and staff.