Education & Member Platforms

Source: Hellenic Data Protection Authority (HDPA), Summary of Annual Activity Report 2024, 2025

Scope: Official Hellenic Data Protection Authority (HDPA) annual activity report context published 2025. All values describe breach notifications and incidents received by the Hellenic DPA through specific regulatory notification channels. GDPR notifications (205) refer to Article 33 GDPR notifications only. Law 3471/2006 notifications (24) refer to electronic communications service provider notifications only. Law 4624/2019 Article 63 incidents (1) refer to that specific legal channel only. The total (230) is the sum of all three channels. None of these values may be presented as total data breaches in Greece, all cyber incidents in Greece, total Greece cyberattack counts, national cyber incident registry totals, confirmed cyberattack success counts, cybercrime totals, private-sector prevalence, or all Greek organisations affected.

Methodology: Official Hellenic DPA breach-notification and regulatory activity context published 2025. The admitted indicators describe: GDPR data breach incidents notified to the Authority (205); data breach notifications submitted by providers of electronic communications services under Law 3471/2006 (24); incident under Article 63 of Law 4624/2019 (1); and total breach incidents (230). These values must not be presented as total Greece cyberattack counts, national cyber incident registry totals, confirmed cyberattack success counts, cybercrime totals, private-sector prevalence, all Greek organisations affected, or all cyber incidents in Greece.