Checked on September 27, 2026
GDPR in Cyprus
How the GDPR works in Cyprus: the supervisory authority, the national law that supplements the regulation, and where to notify a breach.
- Supervisory authority
- Office of the Commissioner for Personal Data Protection (Γραφείο Επιτρόπου Προστασίας Δεδομένων Προσωπικού Χαρακτήρα)
- National law supplementing the GDPR
- Law providing for the protection of natural persons with regard to the processing of personal data and the free movement of such data · Law 125(I)/2018
- Age of digital consent
- 14
- Breach notification
- www.edpb.europa.eu/sme-data-protection-guide/practical-resources-for-smes/cyprus/forms-notification-data-breaches-en_en
- National specifics
- Breach notifications (form from the Commissioner's site) go to commissioner@dataprotection.gov.cy; Greek, or English for cross-border processing.
Where does your company stand?
The free assessment applies these national rules to your answers and scores every area of the law.
Sources
- www.dataprotection.gov.cy/dataprotection/dataprotection.nsf/8B0537C225460C5EC225820A00411976/$file/Data%20breach%20notification%20form%20ENG%20v3.xlsx
- www.edpb.europa.eu/sme-data-protection-guide/practical-resources-for-smes/cyprus/forms-notification-data-breaches-en_en
- www.dataprotection.gov.cy/dataprotection/dataprotection.nsf/2B53605103DCE4A4C225826300362211/$file/Law%20125(I)%20of%202018%20ENG%20final.pdf
- euconsent.eu/digital-age-of-consent-under-the-gdpr/
National laws and portals change. This page is general information, not legal advice; confirm with the authority before relying on it.