Dimitra Karambela

The transposition of NIS2 Directive on cybersecurity into Greek legislation

Greek Law 5160/2024, implementing Directive (EU) 2022/2555 (NIS2 Directive), has recently entered into force providing for cybersecurity obligations to an expanded number of entities. The new legislation introduces robust cybersecurity risk-management measures, imposes tightened incident reporting obligations and aims to ensure the effective supervision and enforcement of cybersecurity obligations. In our latest newsletter we walk through the key elements of the new cybersecurity legal framework in Greece, including a brief compliance roadmap and obligations timeline for companies falling within the scope of Greek Law 5160/2024. READ FULL ARTICLE

The validity of consent in “Consent or Pay” models for behavioural advertising

In November 2023, Meta Platforms Inc. updated its Privacy Policy in relation to behavioural advertising in the European Economic Area (EEA). Users of Facebook and Instagram in the EEA are hereinafter asked to choose between consenting on the processing of their personal data for behavioural advertising purposes or paying a fee for using the platforms READ FULL ARTICLE

The European Commission’s New Adequacy Decision for EU – US data flows

The European Commission has recently adopted a new Adequacy Decision on the EU-US Data Privacy Framework (DPF) in relation to data transfers to the US. The adoption of this Adequacy Decision follows years of negotiations between the EU and the US, after the invalidation of the Privacy Shield. Ιn this article, you may find the new provisions of the EU-US DPF and its implementation. READ FULL ARTICLE