CyprusΟ περί της Εφαρμογής του Κανονισμού (ΕΕ) 2022/2065 Νόμος του 2025 (Law Implementing the Digital Services Act), Coordinator, Registration, Orders and Penalties
Digital Services Act Implementation Law of 2025 (Ο περί της Εφαρμογής του Κανονισμού (ΕΕ) 2022/2065, σχετικά με την Ενιαία Αγορά Ψηφιακών… Υπηρεσιών, Νόμος του 2025), Law 122(I)/2025, Articles 4 to 14, 19 and 20
In force since .
A transparency and process rule binding public and private bodies.
- Obligation class
- Licensing, Reporting, Disclosure
As of .
What it requires
- If you provide intermediary services that fall within the Law (you are established in the Republic, have a legal representative there, have a substantial connection with it, or provide services in it), register in the Coordinator's Register of Intermediary Service Providers within three months of the Register starting to operate, or before you start providing intermediary services in the Republic, with the contact points, languages and legal representative details the Law lists.
- Tell the Coordinator of any change in your registered details immediately and no later than ten days after the change.
- When the Coordinator or a competent authority makes a specific reasoned request for information, supply it without delay, on the schedule and in the detail it sets.
- Comply with Regulation (EU) 2022/2065 in full, because an act or omission contrary to any of its provisions is an offence under the Law and the Coordinator or competent authority may impose a fine.
- Attend when the Coordinator summons you, and produce the documents, books, plans and records it requires, unless you have a reasonable cause.
If you get it wrong
Criminal exposureYes
Criminal exposure note
Article 20(1) punishes an act or omission contrary to any provision of Regulation (EU) 2022/2065 with imprisonment of up to one year, a fine of up to EUR 10,000, or both.
Penalty structure
Article 19(3) caps the administrative fine at 6 percent of the provider's annual worldwide turnover in the preceding financial year, and at 1 percent of annual income or worldwide turnover for information and inspection failures. Article 20(1) adds imprisonment of up to one year, a fine of up to EUR 10,000, or both, and Article 20(2) caps a fine under Article 20(1) at 5 percent of average daily worldwide turnover or income per day.
- Rule
- Turnover pct only
- As of
- Turnover percentage cap
- 6
Who enforces it
Enforcement body
Radio, Television and Digital Services Authority (Αρχή Ραδιοτηλεόρασης και Ψηφιακών Υπηρεσιών), the Digital Services Coordinator; the Ministry of Energy, Commerce and Industry, the Office of the Commissioner for Electronic Communications and the Office of the Commissioner for Personal Data Protection as competent authorities for the matters Article 6 assigns to them; the Cyprus Police receives reports of suspected criminal offences.
What this law does
Article 4(1) designates the Radio, Television and Digital Services Authority (Αρχή Ραδιοτηλεόρασης και Ψηφιακών Υπηρεσιών) as the Digital Services Coordinator under Article 49(2) of Regulation (EU) 2022/2065. Article 6 gives the Authority supervision of providers of intermediary services for the application of Article 26(1)(a) to (c) and (2) and Article 28(1) of the Regulation.
Article 6 gives the Ministry of Energy, Commerce and Industry supervision of Article 6(3), Article 14, Article 26(2) and Articles 30, 31 and 32 of the Regulation. Article 6 gives the Office of the Commissioner for Electronic Communications supervision of the exemptions from liability applied under Articles 4, 5 and 6 of the Regulation.
Article 6 gives the Office of the Commissioner for Personal Data Protection supervision of Article 25(2), Article 26(1)(d) and (3) and Article 28(2) and (3) of the Regulation. Article 8(2) makes the Coordinator the central point for complaints against providers of intermediary services under Article 53 of the Regulation.
Article 8(4)(α) lets the Coordinator or a competent authority request information by a specific reasoned request from providers of intermediary services and from other persons who may reasonably know of the suspected breach, and those persons must supply it without delay on the schedule and in the detail the Coordinator or authority sets.
Article 8(7) lets the Coordinator or a competent authority apply to the court for a prohibitory or mandatory order, including an interim order, against a provider of intermediary services that it considers involved in or responsible for a breach. Article 12(1) and (3) require the competent authorities to see that the orders to act against illegal content and the orders to provide information that they issue meet the conditions in Articles 9 and 10 of the Regulation.
Article 13(2) requires providers of intermediary services within the Act's scope to register in the Register of Intermediary Service Providers within three months of its operation or before they start providing intermediary services in the Republic. Article 13(1) has the Coordinator create the Register and put it into operation within twelve months of the Act's commencement.
Under Article 13(4)(α), providers must tell the Coordinator of any change in the registered details immediately and at the latest within ten days. Article 14 makes the Coordinator's decisions immediately enforceable, and a decision of the Coordinator or a competent authority may be appealed to the Administrative Court under Article 146 of the Constitution.
Article 19(3) caps the administrative fine at 6 percent of the provider's annual worldwide turnover in the preceding financial year, and at 1 percent of annual income or worldwide turnover for supplying inaccurate, incomplete or misleading information, failing to answer or correct it, or not submitting to an inspection.
Article 20(1) makes an act or omission contrary to any provision of the Regulation a criminal offence punishable by imprisonment of up to one year, a fine of up to EUR 10,000, or both. Article 20(2) caps a fine imposed under Article 20(1) at 5 percent of the provider's average daily worldwide turnover or income in the preceding financial year, per day.
When LexLint raises it
When your app profile says your app operates a social platform.