Enforcement per member state
AI Act enforcement in Greece
Last verification round: 2026-08-10
- Who supervises · designated
- Hellenic Data Protection Authority (HDPA)
- Single point of contact
- Hellenic Data Protection Authority (HDPA)
- Implementing law
- in force
The situation in this country
Greece completed a full national enforcement framework in July 2026 with Law 5321/2026 (Government Gazette A' 114, 20 July 2026), after a public consultation in June and July 2026. The law adopts a distributed supervision model: data protection authority HDPA is the central market surveillance authority and national contact point, including for prohibited practices (Article 5), Annex III high-risk systems and transparency obligations (Article 50), while telecoms regulator EETT is the notifying authority and hosts the AI sandbox. The law covers supervisory measures and administrative sanctions and criminalises stripping transparency markings from synthetic content. No fine or formal investigation is known yet.
Obligations at play here
What has happened
2026-07-20 | Grieks parlement
Law 5321/2026: Greek implementation and sanctions framework for the AI Act
Law 5321/2026 (Government Gazette A' 114 of 20 July 2026) contains the national implementing measures for Regulation (EU) 2024/1689: designation of competent authorities, supervisory powers and administrative sanctions, with AI literacy (Article 4) as a factor in setting fines, and a criminal provision on stripping transparency markings from synthetic content. This puts Greece among the first Member States with a complete national enforcement framework.
Ειδική Γραμματεία Τεχνητής Νοημοσύνης (officiële Griekse AI-portal, met link naar de Staatscourant)
2026-07-20 | Grieks parlement
HDPA central market surveillance authority, EETT notifying authority
Law 5321/2026 designates data protection authority HDPA as the principal market surveillance authority for prohibited AI practices, Annex III high-risk systems and the Article 50 transparency obligations among others, and as national contact point towards the AI Office. Telecoms regulator EETT becomes the notifying authority and hosts the AI sandbox together with the Pharos AI Factory.
Ειδική Γραμματεία Τεχνητής Νοημοσύνης (officiële Griekse AI-portal)
2022-07-13 | Hellenic Data Protection Authority
Greek authority fines Clearview AI 20 million euros
The Greek authority fined Clearview AI 20 million euros for processing biometric data of Greek citizens without a lawful basis. The same practice, building a facial recognition database through scraping, now falls under the Article 5 prohibition of the AI Act.