Online safety & content laws in Greece (2026)

The Hellenic Gaming Commission (EEEP) and the Hellenic Telecommunications and Post Commission (EETT) announced a formal cooperation framework enabling faster DNS-level enforcement against unlicensed online gambling domains; by end-2025 approximately 11,000 domains had already been blocked. The agreement sets a model for cross-agency online enforcement that other content-harm regulators can replicate.

The Ministry of Digital Governance published a standalone national strategy on child online safety, combining DSA obligations with public-awareness campaigns and educational programmes. It is the first dedicated Greek policy document that maps the full child-protection architecture across law, regulation, and public-sector bodies.

Published in Government Gazette FEK A' 195/27.11.2024, Law 5160/2024 fully transposes Directive (EU) 2022/2555 (NIS2), mandating cybersecurity risk-management measures, mandatory incident reporting, and appointment of a dedicated Security Officer for all essential and important entities. The National Cybersecurity Authority (EAK) is confirmed as the central supervisory and enforcement body, with direct implications for online-infrastructure operators.

Under Law 5099/2024, the Hellenic Telecommunications and Post Commission (EETT) opened and operationalised the mandatory registry for all intermediary digital service providers established in Greece, with a registration deadline of 22 October 2024. The registry is the practical enforcement infrastructure enabling EETT, as Digital Services Coordinator, to supervise platforms' DSA compliance.

Greece enacted Law 5099/2024, implementing EU Regulation 2022/2065 (DSA) and designating EETT as the national Digital Services Coordinator with full supervisory and sanctioning powers over intermediary service providers. The law establishes user-complaint mechanisms, trusted-flagger procedures, and a penalty regime for non-compliant hosting, social-media, and marketplace platforms.

EETT granted SafeLine.gr — Greece's CSAM and illegal-content hotline — the status of Trusted Flagger under the Digital Services Act, the first such designation in Greece. Trusted Flagger status obligates major platforms to process SafeLine's illegal-content reports with priority, significantly accelerating takedowns of child sexual abuse material and other illegal content.

Published in Government Gazette 189/A/20-11-2023, Law 5067/2023 supplements EU Regulation 2021/784 on terrorist content online, requiring Greek-established hosting providers to remove or disable terrorist content within one hour of a removal order issued by a competent public prosecutor. EETT is designated as the national competent authority for provider compliance.

The Ministry of Digital Governance published Greece's first comprehensive National Cybersecurity Strategy, setting five strategic goals spanning governance, infrastructure protection, incident response, R&D investment, and capacity-building, and formally empowering the National Cybersecurity Authority (NCSA/EAK) as the central coordination body for all public and private-sector cyber threats.

Law 4624/2019 transposed Directive (EU) 2016/680, added national supplementary measures to the GDPR, and formally re-established the Hellenic Data Protection Authority (HDPA) under a revised constitutional mandate. It superseded most of Law 2472/1997 and set the current national baseline for online data-protection and privacy rights.

Law 4285/2014 implemented EU Framework Decision 2008/913/JHA, criminalising public incitement to hatred and violence — including online — based on race, religion, ethnicity, sexual orientation, gender identity, and disability, with penalties of up to three years imprisonment. It remains the primary legal instrument used to prosecute online hate speech in Greece.

Law 3471/2006 transposed EU Directive 2002/58/EC (as later amended by 2009/136/EC), creating binding rules on the confidentiality of electronic communications, processing of traffic and location data, data-breach notification for telecoms providers, and a prior-consent requirement for unsolicited commercial communications. It remains Greece's operative e-privacy law for the online sector.

SafeLine.gr became a full member of the International Association of Internet Hotlines (INHOPE) on 18 October 2005, establishing Greece's first dedicated mechanism for reporting illegal online content — primarily child sexual abuse material — and creating an operational link to EU-level safer-internet infrastructure. SafeLine later became the Greek Safer Internet Centre's hotline node under the EU's Better Internet for Kids programme.

Law 2472/1997 transposed EU Directive 95/46/EC, creating the original national data-protection framework and the Hellenic Data Protection Authority (HDPA) as an independent supervisory body with constitutional standing. Although largely superseded by Law 4624/2019, it laid the institutional and legal foundation for all subsequent online privacy, content regulation, and enforcement in Greece.