GDPR Implementation in Cyprus

Alexandros Georgiades and Ioanna Sapidou are the authors of ‘Cypriot implementation of the GDPR’, an article reproduced from Thomson Reuters with the permission of the publishers, that discusses Cyprus’s Law Providing for the Protection of Natural Persons with Regard to the Processing of Personal Data and for the Free Movement of Such Data of 2018 (Law No. 125(1)/2018) (Personal Data Law), which implements the EU General Data Protection Regulation (GDPR).

The article addresses key requirements of the Personal Data Law and derogations from the GDPR, such as requirements to appoint a data protection officer, exceptions permitting processing special categories of personal data, including genetic, biometric, and health data, data subject rights derogations including under GDPR Article 23, and derogations for specific processing situations under GDPR Articles 85 to 91.

The full article is available to read here.

The publication also includes a Q&A providing jurisdiction-specific commentary on Cyprus’ implementation of the GDPR, including key derogations from the GDPR’s requirements.

Our firm specialises in all aspects of Cyprus Data Protection legislation and the corresponding European regulations. For more information, please contact a member of our Data Protection Law team.