Law 125(I)/2018, Cyprus GDPR Supplement

Law 125(I)/2018 of 2018

A citation is an address, not a summary. The first part names the law; what follows narrows it to the exact section, article or paragraph.

What follows is LexLint's own research summary of this law, not legal advice.

In force since 31 July 2018.

A comprehensive regime rule binding public and private bodies.

As of 24 August 2026.

What it requires

Establish a General Data Protection Regulation (GDPR) Article 6 lawful basis before processing personal data of a person in Cyprus, including data collected by crawling.

What this law does

Drafted with AI from the cited sources under the direction of UnGovr staff. UnGovr holds editorial responsibility for this page.

Cyprus's private-sector regime is the General Data Protection Regulation (GDPR) plus Law 125(I)/2018 (The Protection of Natural Persons with regard to the Processing of Personal Data and for the Free Movement of such Data Law of 2018), published in the Official Gazette of the Republic of Cyprus on 31 July 2018, supplying domestic derogations and procedural rules. The Office of the Commissioner for Personal Data Protection (ODPC) is the supervisory authority. The law's official English translation has not been located, so the article-level detail below rests on commentary.

When LexLint raises it

crawls_web
trains_models
deploys_chatbot
automated_outreach

Read the law

Official Gazette of the Republic of Cyprus, 31 July 2018
secondary commentary (Harris Kyriakides, a Cyprus-qualified law firm), not independently confirmed against the Law's own text

Every line above is drawn from the primary source linked here, read on the date shown. This is a research summary, not legal advice.

Back to the example · Lint your app