Law 5321/2026: Measures for the implementation of Regulation (EU) 2024/1689 (Artificial Intelligence Regulation), amendment of Law 4961/2022 and other provisions

Summary

Greece's national law supplementing the EU AI Act (Part A, Articles 1-26). The Hellenic Data Protection Authority is market surveillance authority for prohibited practices, Annex III high-risk systems and Article 50 transparency duties, single point of contact and complaint body; sectoral authorities keep Annex I products. EETT is the notifying authority, hosts a Coordination and Know-how Centre for AI and runs the AI regulatory sandbox with the DPA. Authorities may issue warnings, orders and reprimands, the Article 99 fines and periodic penalties. The law creates a public-sector AI register and an AI Observatory and criminalises removing Article 50 deepfake markings.

Language

No English version of this instrument was found. The English title and the summary are the register's own, written from the sources below; for the exact wording use the Greek text.

Safety topics

Status notes

Signed and published on 20 July 2026 and in force from publication (Article 58), unless individual provisions say otherwise. Article 11 designates the Hellenic Data Protection Authority as notified body for high-risk systems put into service by law-enforcement, migration and asylum authorities, Article 13 allows real-world testing of high-risk systems outside sandboxes, and Article 20 adds AI Act infringements to the scope of Law 4990/2022. Article 26 repeals the AI chapter of Law 4961/2022 (Chapter B of Part A); the public-sector AI register and the AI Observatory are re-established at the Special Secretariat for AI and Data Governance, and public bodies already using AI systems must register them by 31 December 2026. Part B holds other provisions of the Ministries of Digital Governance and Interior, among them Article 47 on using an AI system to evaluate and manage state-aid actions of the Partnership Agreement for Regional Development. The Commission's list of single points of contact (last updated 7 September 2026) names the Hellenic Data Protection Authority for Greece without the mark for a designation still pending.

Sources

Open the official source https://ia37rg02wpsa01.blob.core.windows.net/fek/01/2026/20260100114.pdf

Secondary source: https://www.dpa.gr/en/enimerwtiko/press-releases/hellenic-dpa-takes-leading-role-implementing-eu-ai-act-greece

Local copy

Verification

History

1. 2026-10-17english_version: – → {"kind": "none found"} — no English text of the law was found2026-10-17-recheck-europe-3 · Claude Code (claude-opus-5-5)
2. 2026-10-17notes: Signed and published on 20 July 2026 and in force from publication (Article 58), → Signed and published on 20 July 2026 and in force from publication (Article 58), — rewritten: consultation dates removed (no stored file); Article 11 (DPA as notified body) and Article 47 (AI in state-aid management) added; Article 20 described as in the gazette (scope of Law 4990/2022); the Commission-list sentence restored from the page now stored for this record2026-10-17-recheck-europe-3 · Claude Code (claude-opus-5-5)

Related records

EU AI Act European Union · Partially in force

Greek Law 4961/2022 (AI chapter) Greece · Superseded

Greece AI Blueprint (Advisory Committee report) Greece · Published (non-binding, current)

Citation

Hellenic Parliament; Ministry of Digital Governance. Law 5321/2026: Measures for the implementation of Regulation (EU) 2024/1689 (Artificial Intelligence Regulation), amendment of Law 4961/2022 and other provisions [Law 5321/2026 (ΦΕΚ Α΄ 114/20.07.2026)]. 2026-07-20. https://ia37rg02wpsa01.blob.core.windows.net/fek/01/2026/20260100114.pdf. Status: In force; verified 2026-10-17 (level A). Local copy archive/GR-01/2026-10-12/official.pdf retrieved 2026-10-12 04:36:35 UTC, SHA-256 f5d3ccb03a811b872a7babd4733c523a66e2635f6e05e36fa2f8e74e1dd8e73b. Every AI Policy Ever, version 1.18 (snapshot 2026-10-18), record GR-01.

Improve this record

Know of an amendment, a status change or an error? Report news or an error on GitHub; the form opens with this record filled in.