The EU AI Act in Greece

Per Greece - Data Governance Implementation (5188/2025)

• Ministry of Digital Governance — Competent supervisory authority and single information point for the implementation of Law 5188/2025; maintains registries and enforces administrative measures.
• Hellenic Data Protection Authority (HDPA) — National supervisory authority for data protection matters (GDPR) and cooperating authority for personal data issues arising under the national implementation.
• Publications Office / Government Gazette (FEK) — Official publisher of the full text of Law 5188/2025 (FEK A' 49/28-03-2025).

Per Greece - AI Fundamental Rights Supervisors

• Hellenic Ministry of Digital Governance — Publisher and national coordinator for AI Act implementation; notifier to the European Commission
• Hellenic Data Protection Authority (HDPA) — Designated Article 77 authority for data‑protection and privacy matters; may request/access AI Act documentation when necessary to fulfil its GDPR/mandate duties
• Greek Ombudsman (Synigoros) — Designated Article 77 authority for administrative‑complaints and equality issues; supervises public administration and investigates maladministration including discrimination allegations arising from AI use
• Hellenic Authority for Ensuring Communications Secrecy (ADAE) — Designated Article 77 authority for matters involving confidentiality and secrecy of communications where AI systems may impinge on communications privacy
• Greek National Commission for Human Rights (GNCHR) — Designated Article 77 body for broad human‑rights oversight and advice, including non‑discrimination and other fundamental‑rights impacts of AI

Per Greece - National AI Strategy

• Special Secretariat of Foresight, Presidency of the Government — Coordinator of the High-Level Advisory Committee and host of the Blueprint publication
• Hellenic Ministry of Digital Governance — Proposed central co‑ordination for AI policy and implementation
• Hellenic Data Protection Authority (HDPA) — Data protection oversight and integration with AI governance where personal data is processed

Per Greece - Omnibus Measures (5039/2023)

• National Cybersecurity Authority (Εθνική Αρχή Κυβερνοασφάλειας) — Competent authority for PRS matters; oversees cybersecurity-related authorizations and conformity checks as described by the law.
• Ministry of Infrastructure and Transport (Υπουργείο Υποδομών και Μεταφορών) — Responsible for implementing transport-safety, vehicle registration and related sectoral provisions of the Act.
• Ministry of Digital Governance (Υπουργείο Ψηφιακής Διακυβέρνησης) — Houses the General Secretariat for Telecommunications and Posts, under which the National Cybersecurity Authority and PRS competent authority operate; responsible for digital-governance implementing acts.
• e-EFKA (Unified Social Security Organisation) — Implements social-security and debt-treatment provisions for victims and relatives where applicable; issued Circular No.34/2023 to implement selected articles.

Per Greece - Digital Governance Framework (4961/2022)

• Ministry of Digital Governance (Greece) — Primary coordinating ministry for digital governance, hosts the General Directorate of Cybersecurity and chairs AI coordinating bodies.
• National Cybersecurity Authority / General Directorate of Cybersecurity — National authority for cybersecurity coordination, conformity assessment coordination, market surveillance for ICT products and advisory role on cyber threats.
• Hellenic Data Protection Authority (HDPA / DPA) — Data protection supervisory authority — cooperates on DPIAs and privacy implications of AI and digital systems.

Per Greece - National Digital Strategy (ΦΕΚ 2894/Β/2021)

• Ministry of Digital Governance (Υπουργείο Ψηφιακής Διακυβέρνησης) — Lead authority for the Digital Transformation Bible, governance, coordination, monitoring and implementation support.
• Hellenic Data Protection Authority (Αρχή Προστασίας Δεδομένων Προσωπικού Χαρακτήρα) — National supervisory authority for data protection and GDPR enforcement; oversight of privacy compliance in public-sector data projects.
• National Cybersecurity Authority (Εθνική Αρχή Κυβερνοασφάλειας) — National authority for cybersecurity policy, supervision, registration of critical & significant entities and enforcement under NIS2 and national cyber law.
• Gov.gr (Single Digital Portal) — Implementation Secretariat — Operational portal and platform for hosting public services and coordinating service integration across ministries.

Per Greece - Digital Governance Code (4727/2020)

• Ministry of Digital Governance (Greece) — Primary implementing and coordinating authority for the Code; issues technical specifications and supervising secondary measures.
• National Printing House (Government Gazette / Εθνικό Τυπογραφείο) — Official publisher of laws and Government Gazette issues (FEK) where Law 4727/2020 was published.
• Hellenic Data Protection Authority (HDPA / DPA) — Supervises personal data processing compliance and advises on privacy aspects of digital governance implementations.
• Hellenic Telecommunications and Post Commission (EETT) — Regulator for electronic communications; maintains registries/lists relevant to trust service providers and e‑signature provider information.

Per Greece - Data Governance Implementation (5188/2025)

• Administrative fines ranging from €10,000 to €100,000 for breaches of the implementing provisions (imposed after a prior hearing).
• Warnings and documented corrective measures requiring remedial action within a specified timeframe.
• Temporary suspension or removal from the national registers (e.g., for data altruism organisations or data intermediation providers).
• Injunctive measures ordering cessation of non-compliant activity or requiring specific changes to processing/publishing practices.
• Public publication of enforcement decisions and measures (transparency sanctions).
• Preservation of rights to seek judicial review and appeals before the competent Administrative Court of Appeal.
• Potential civil liability under existing national or Union rules, including GDPR-based claims and remedies.

Per Greece - AI Fundamental Rights Supervisors

• This publication is a designation notice and does not itself impose new fines; enforcement and fines for AI Act non‑compliance are primarily within the remit of the national market surveillance authority as provided by the AI Act.
• Potential administrative measures under the AI Act available to market surveillance authorities: warnings, orders to bring systems into compliance, temporary or permanent restrictions on placing systems on the market, and fines in accordance with AI Act sanctioning rules.
• National remedies: affected parties may challenge administrative decisions under national administrative/judicial review procedures.
• Article 77 authorities may trigger testing and referrals that can lead to market surveillance investigations and consequent sanctions.

Per Greece - National AI Strategy

• As a strategy document, the Blueprint does not itself prescribe immediate penalties; it anticipates future legislation to introduce administrative fines and enforcement measures consistent with EU norms.
• Future supervisory authority (recommended) to have powers to require corrective actions, impose administrative sanctions and suspend non-compliant high-risk deployments (to be defined in subsequent law).
• Civil liability standards for harms caused by AI to be clarified in follow-up legislation, with remedies and compensation mechanisms envisaged.
• Procurement sanctions and contract remedies for public-sector contractors failing to meet documentation, transparency or safety requirements (to be implemented in procurement rules).

Per Greece - Omnibus Measures (5039/2023)

• Administrative sanctions and fines as provided for in the amended subject-matter statutes (e.g., consumer protection, transport infractions) — specifics are set in the respective enforcement provisions and implementing secondary legislation.
• Revocation or suspension of authorizations or licenses for non-compliance with statutory or delegated requirements.
• Administrative recovery of amounts paid in error where relief measures or benefits were wrongly granted.
• Ordinary legal remedies and penalties under administrative and criminal law where fraud, false declarations or criminal acts are established in connection with benefits or authorizations.

Per Greece - Digital Governance Framework (4961/2022)

• Administrative sanctions (monetary fines, directives to remedy non‑compliance, suspension of operations) as provided by delegated enforcement instruments.
• Orders for market withdrawal or corrective measures for non‑conforming devices and services.
• Civil liability for damages caused by defective digital products, AI decision harms or negligent operation of DLT/smart contract infrastructure.
• Criminal liability where applicable under general criminal law provisions (e.g., where offences arise in the operation of regulated systems).

Per Greece - National Digital Strategy (ΦΕΚ 2894/Β/2021)

• Administrative enforcement measures such as suspension or reallocation of project funding for non-compliance with strategy obligations (administrative consequences referenced in the governance and oversight provisions). ([digitalstrategy.gov.gr](https://digitalstrategy.gov.gr/website/static/website/assets/uploads/digital_strategy.pdf))
• Performance and accountability actions against responsible officials where failure to implement assigned projects is established under administrative procedures.
• Data protection enforcement and fines by the Hellenic Data Protection Authority under GDPR for privacy violations. ([dpa.gr](https://www.dpa.gr/en?utm_source=openai))
• Cybersecurity-related regulatory enforcement by the National Cybersecurity Authority, including registration requirements and corrective measures under national cybersecurity law. ([cyber.gov.gr](https://www.cyber.gov.gr/?utm_source=openai))
• Contractual or procurement consequences under public procurement and funding rules for projects that do not comply with stated conditions.

Per Greece - Digital Governance Code (4727/2020)

• Administrative corrective measures and fines where provided by the Code or by delegated implementing acts.
• Sectoral enforcement actions in coordination with regulators for breaches (for example, trust service non‑conformity coordinated with EETT or data protection breaches referred to the Hellenic Data Protection Authority under GDPR).
• Reputational and operational remedies including orders to cease non‑compliant practices and to remediate accessibility/interoperability failures.