Greece

• Lawful basis for processing personal data of EU residents
• Data subject rights: access, rectification, erasure, portability, objection
• Data Protection Impact Assessments (DPIAs) for high-risk processing
• +4 more requirements

• Risk management measures for network and information systems
• Incident reporting: 24h early warning, 72h notification to CSIRT
• Supply chain security assessments
• +3 more requirements

• Double materiality assessment (impact materiality + financial materiality)
• Report against ESRS (European Sustainability Reporting Standards) - 12 standards
• Digital tagging in XHTML with iXBRL markup
• +4 more requirements

A Greek court has sentenced Intellexa founder and three associates to eight years in prison for unlawful access to private communication systems and violations of privacy and data laws related to the Predator spyware. This enforcement action demonstrates increased legal accountability for privacy violations and signals heightened regulatory scrutiny of surveillance technologies, with potential cross-border implications for companies handling sensitive data.