Law 2472/1997 defines the correct way of collecting and processing personal data. But who falls under it? Does the creator and administrator of a website with registered members have to disclose the file it keeps to the Authority for the Protection of Personal Data?

The overwhelming majority of websites operating in Greece, and especially those that have the option of registering members, must, according to the law, notify the Personal Data Protection Authority of the record keeping.

File notification to the APDPH is a process that requires client-lawyer cooperation. The specialized knowledge of the lawyer on technical IT issues can be extremely useful, not only for the drafting of applications to the Authority, but also for their support before it, where this is deemed necessary.

The procedure differs depending on the place of data collection (processing) and whether or not it is transferred to a country outside the EU. From the time of submission of the application to the APDPH, a long period of time may elapse until the final decision of the Authority with or without the procedure for representation of the lawyer at the Boards of the Authority.