Online Platforms and GDPR: The Turning Point of Judgment C-492/23 on Marketplace Liability
Introduction: The End of Platform “Neutrality” On 2 December 2025, the Court of Justice of the European Union (hereinafter “CJEU”) delivered a landmark judgment in Case C-492/23 (Russmedia Digital SRL), which fundamentally redefines the liability framework for operators of online marketplace platforms in the field of personal data protection law. The judgment concerns the interpretation of […]
Κάμερες κυκλοφορίας: Είναι νόμιμες; Όσα πρέπει να γνωρίζουν οι Ο.Τ.Α.
Η χρήση συστημάτων καμερών για τον έλεγχο της κυκλοφορίας στους ελληνικούς δρόμους έχει επανέλθει δυναμικά στο δημόσιο διάλογο, καθώς η τεχνολογική εξέλιξη και οι πολιτικές «έξυπνων πόλεων» οδηγούν όλο και περισσότερους Δήμους και φορείς να αναζητούν τρόπους παρακολούθησης και διαχείρισης της κυκλοφορίας. Ωστόσο, το νομικό πλαίσιο που διέπει τη χρήση των καμερών παραμένει περιορισμένο, αποσπασματικό […]
Money Muling Cases – What Users Should Be Aware Of
Our Law Office recently handled a case before the Single Member Misdemeanor Court of Rhodes in which two of our clients were charged with “joint acceptance of proceeds of crime and money laundering”. The case concerned a phishing scam, through which third parties used deceptive electronic messages and fake banking websites to obtain our clients’ […]
Chat Control: Legal and ethical challenges of an ambiguous Regulation
1. Introduction On 11 May 2022, the European Commission presented the proposal for a Regulation on preventing and combating child sexual abuse (Regulation to Prevent and Combat Child Sexual Abuse – CSA Regulation), with reference number 2022/0155(COD). The proposal aims to create a mandatory Union framework for the detection, reporting and removal of child sexual […]
GDPR Fine: €20,000 for Recorded Phone Calls – Key Takeaways from HDPA Decision 32/2025
The Hellenic Data Protection Authority (hereinafter the “HDPA” or the “Authority”) imposed a fine of €22,000 on an insurance company (NN Hellas – €20,000) and a cooperating dental company (MEDIADENT IKE – €2,000) for: Refusal to satisfy the right of access to recorded telephone calls, Improper cooperation with the HDPA, Lack of transparency in determining […]
CJEU Ruling on Pseudonymisation: Landmark Case C-413/23 P (EDPS v SRB) and Its Impact on GDPR Compliance
1. Introduction The Court of Justice of the European Union (hereinafter “CJEU”) issued a significant decision on data protection law that will reshape how organisations approach pseudonymisation and information obligations under the European data protection framework (hereinafter the “Decision”). In Case C-413/23 P (EDPS v SRB), delivered on 4 September 2025, the CJEU set aside […]
Record-Breaking Fines for Cookies by the CNIL on Google and Shein
1. Introduction The French data protection authority (CNIL) has delivered its most significant enforcement action to date, imposing a combined €475 million in fines across two landmark decisions published on September 4, 2025. The sanctions against Google (€325 million total) and SHEIN’s European operations (€150 million) represent not merely record-breaking penalties, but a fundamental shift […]
General Court Confirms Validity of EU–US Data Privacy Framework: What Businesses Need to Know Post-Schrems II
Article in Greek available on Lawspot.gr 1. Introduction In a landmark ruling delivered on September 3, 2025, the General Court of the European Union decisively upheld the European Commission’s adequacy decision for the EU-US Data Privacy Framework (DPF), marking a crucial victory for transatlantic data flows in the post-Schrems II era. The judgment in Latombe […]
New Licensing Procedure for Crypto-Asset Service Providers (CASPs) in Greece
Article originally published on Lawspot.gr in Greek. With Decision 8/1059/30.07.2025, the Hellenic Capital Market Commission (HCMC) established the procedure for submitting applications for the licensing of Crypto-Asset Service Providers (CASPs), in the context of implementing the Regulation (EU) 2023/1114 (MiCA). 1. What is the applicable regulatory framework? 1.1. The European framework (MiCA Regulation) The MiCA […]
National Cybersecurity Authority: Extension of Deadline for Submission of Basic & Important Entities’ Information
According to Joint Ministerial Decision 1990/28.07.2025 (B’ 4241/04.08.2025), the deadline for the submission of information by basic and important entities in the National Cybersecurity Authority (NCSA) digital platform is extended until Tuesday, 30 September 2025, in line with the provisions of Law 5160/2024. Who is affected This measure applies to all entities falling under the […]