Enforcing jurisdiction
Greece · Geography does not establish applicable law.
Confirmed applicable legislation
Privacy topics

DPA case 12/2026 – Dismissed (Greece, 2026)

Dismissed
Hellenic Data Protection Authority13 May 2026Greece
final
Dismissed

Privacy enforcement record

This record is classified outside cookie consent. Subject classification does not confirm an applicable law. It is not included in cookie statistics or the Risk Calculator.

The Hellenic Data Protection Authority dismissed a complaint from a foreign national seeking removal from a registry of undesirable aliens. This decision is important as it reinforces the authority's stance on national security and the handling of sensitive information.

What happened

A foreign national's request to delete their entry from the National Registry of Undesirable Aliens was dismissed.

Who was affected

A foreign national who was registered as undesirable due to national security concerns.

What the authority found

The authority upheld the entry ban, stating it was justified under national security laws.

Why this matters

This case underscores the balance between individual rights and national security. It signals to individuals that such registrations may be difficult to challenge, emphasizing the need for transparency in governmental processes.

Recorded legal citations
Automatically processed
View original scraped data
Art. 23(1)(a) GDPR
Art. 23(1)(c) GDPR

Original imported citations before automated processing; the processing history does not establish independent verification.

National Law Articles
AI-identified
Art. 82(1) Law 3386/2005
Art. 54(2) Law 4624/2019
Art. 55(4) Law 4624/2019

Source checks

Secondary-source text retrieved.

Automated check recorded — 18 October 2026.

Processing notes: national law identified.

Retrieved text may be a secondary summary or an announcement. These automated statuses do not establish that the original decision was read or that the record received an independent legal review. How we check sources

Full Legal Summary
Detailed

The complainant, a foreign national, submitted a complaint to the Hellenic DPA through his authorized attorney, seeking his deletion from the Hellenic the National Registry of Undesirable Aliens. In response to the Authority's request for clarifications, the competent Directorate of the Ministry of Citizen Protection informed the DPA that: • By a decision dated 27-07-2017, an entry ban and registration in the National Registry of Undesirable Aliens were imposed on the complainant for reasons of national security. • Following temporary 48-hour lifts of the measure for humanitarian reasons in 2019, the entry ban was re-imposed. • Subsequent decisions in 2020, 2023, and 2025 maintained the entry ban and renewed his registration in the National Registry of Undesirable Aliens for successive three-year periods, as the grounds for registration remained active. • The explicit grounds and documentation behind the registration were not disclosed to the complainant because the competent Directorate classified the file as restricted/classified service material. The complainant and his attorney attended a DPA hearing on 22-04-2026, arguing that the registration lacked specific, adequate, or definitive justification regarding any threat to public order or national security. They noted that the complainant has no criminal convictions, poses no threat, and possesses strong ties, residency, and business operations in the region of Northern Epirus and Greece, meaning the entry ban severely disrupts his professional and family life. According to the provisions of Article 82(1) of Law 3386/2005, foreign nationals whose presence in Greek territory constitutes a threat to national security, public safety, or public order can be registered in the National Registry of Undesirable Aliens, with registrations subject to an ex officio review every three years. Furthermore, pursuant to the provisions of Article 54(2) and Article 55(4) of Law 4624/2019 (the Greek law implementing the GDPR

Outcome

Dismissed

The complaint or investigation was dismissed.

Related Enforcement Actions (0)

No other enforcement actions found for DPA case 12/2026 in GR

This is the only recorded action for this entity in this jurisdiction.

Details

Decision Date

13 May 2026

Authority

Hellenic Data Protection Authority

GDPRhub ID

gdprhub-10145

About this data

Data: GDPRhub (noyb.eu)
Licensed under CC BY-NC-SA 4.0
Automatically normalized and classified

Cite as: Cookie Fines. DPA case 12/2026 - Greece (2026). Retrieved from cookiefines.eu

Report Inaccuracy

Last updated: