On the 31st of July 2018, the Cyprus Government Gazette, officially published Law 125(I)/2018, on the protection of natural persons with regard to the processing of personal data and on the free movement of such data.
The scope of the aforementioned legislation is to promote the effective implementation of some provisions of the Regulation 2016/679 of the European Parliament and of the Council of 27 April 2016, the so-called General Data Protection Regulation or GDPR. Additionally, Law 125(I)/2018 repeals the previous legislation regarding personal data, Law 138(I)/2001.
Some of the provisions of Law 125(I)/2018
It is worth mentioning some of the most important provisions of Law 125(I)/2018 which are the following:
- Τhe processing of personal data based on the consent of a child, of at least 14 years of age, at the information society services is legal;
- Τhe processing of genetic and biometric data for the purpose of health and life insurance is prohibited, unless the processing is based on the consent of the data subject; and
- Τhe appointed Data Protection Officer (DPO) shall be bound by confidentiality and non-disclosure obligations.
Please click here to read the publication at the Cyprus Government Gazette.
The information set out in this publication provides general guidance and for information purposes only. It does not constitute or substitute professional advice. We shall not be responsible for any loss occasioned by acting or refraining from acting on the basis of this publication.Back to News