Greece. ePrivacy / marketing. Act
Law 3471/2006Law 3471/2006 on the protection of personal data and privacy in the electronic communications sector
In force
Partly verified
Low confidence.Not verified this session.
§1Summary
- Synopsis
Law 3471/2006 implements the ePrivacy Directive in Greece, requiring consent for non-essential cookies and opt-in for unsolicited electronic marketing.
- Key themes
- Unique features
Enforcement is split between the HDPA and ADAE, which supervises secrecy of communications.
- SaaS relevance
Any SaaS website, app or product that sets non-essential cookies/SDKs or sends marketing emails/SMS to users in this country needs prior consent (subject to exemptions) under this law, regardless of where the provider is based.
§2Obligations
- Extraterritorial
- Yes
- Breach notification
- Telecom providers: authority notification under Reg 611/2013; otherwise GDPR
- DPO
- No
- Cross-border transfers
- None
- Maximum penalty
- Fines under Law 3471/2006 and GDPR
§3Dates
- Key dates
- Adopted
- In force
- Amended by Law 4070/2012 (cookies Art 4(5)) and Law 4624/2019
§4Text and authority
- Text
- Authoritative text dpa.gr
- Authority
- Hellenic Data Protection Authority (cookies/marketing); Hellenic Authority for Communication Security and Privacy (ADAE) for confidentiality of communications
§5Where it applies
- Domestic law of
- Greece
§6Sources and verification
- Sources consulted
- Verification
Low confidence.
Partly verified
Low confidence.Not verified this session.