GreeceLaw 5321/2026, National AI Act Implementation Law
Law 5321/2026, arts. 3-5, 16, 23 (FEK A' 114/20.07.2026)
A citation is an address, not a summary. The first part names the law; what follows narrows it to the exact section, article or paragraph.
What follows is LexLint's own research summary of this law, not legal advice.
In force 65 days, effective 20 July 2026.
An AI transparency rule binding public and private bodies.
As of 6 September 2026.
What it requires
- Do not remove or interfere with the machine-readable marking your AI system embeds in synthetic audio, image, video, or text output under EU AI Act Article 50(1).
- Do not remove or interfere with a deployer's disclosure that content is a deepfake or has been artificially generated or manipulated, under EU AI Act Article 50(4); Law 5321/2026 makes doing so a crime in Greece.
If you get it wrong
Criminal exposureYes
Criminal exposure note
Removing the machine-readable marking on synthetic output, obstructing the AI system provider's technical labelling solution, or removing or obstructing a deployer's deepfake disclosure, is punished with imprisonment and a fine, unless the act is punished more severely under another provision (art. 23).
Who enforces it
Enforcement body
Hellenic Data Protection Authority (HDPA), designated the market surveillance authority under AI Act Article 70(1) for Article 5 prohibited-practice systems, Annex III high-risk systems, and Article 50 transparency systems, and the single point of contact under Article 70(2); the Hellenic Telecommunications and Post Commission (EETT) is the notifying authority under Article 28(1).
What it reaches
Obligation class
Content labelling
What it makes you log
Who may demand the log
Regulator
Logging duty
Articles 3-5 designate the HDPA, the EETT and the single point of contact under the AI Act; Article 23 criminalises removing an AI Act Article 50 marking or disclosure; neither imposes a record duty of its own. Article 16 paragraph 5 is different: it applies by analogy paragraphs 4 and 5 of Article 15 of Law 4624/2019, and paragraph 4(δ) of that article orders and compels the surrender to the HDPA of documents, filing systems, equipment or means of processing personal data. That is a party-facing production duty, not a bare grant of inspection power to the authority (unlike Italy's Law 132/2025 Article 20, which names only the regulator's own vigilanza and inspection activity): a party ordered to hand over documents on demand cannot comply without having kept them.
- Kind
- Implicit
- As of
- 22 September 2026
- Provision
- Article 16 paragraph 5, incorporating by reference Law 4624/2019 Article 15 paragraph 4(δ)
Who checks it
Audit expectation
on_request
What this law does
Drafted with AI from the cited sources under the direction of UnGovr staff. UnGovr holds editorial responsibility for this page.
Article 3 designates the Hellenic Data Protection Authority (HDPA) as the market surveillance authority under AI Act Article 70(1) for systems within the Article 5 prohibited practices, the Annex III high-risk list, and the Article 50 transparency duties; Article 4 makes the HDPA the AI Act's single point of contact, and Article 5 names the Hellenic Telecommunications and Post Commission (EETT) as the notifying authority for conformity-assessment bodies.
Article 16 gives the HDPA and other market-surveillance authorities warning, reprimand, and Article 99 fining powers on top of the AI Act's own machinery, plus a periodic financial penalty of up to 2 percent of an undertaking's average daily worldwide turnover for continuing non-compliance.
Article 23 makes it a crime, punished by imprisonment and a fine unless a more severe provision applies, to remove or obstruct the machine-readable marking an AI system embeds in synthetic output under AI Act Article 50(1), or to remove or obstruct a deployer's disclosure under Article 50(4) that content is a deepfake or has been artificially generated or manipulated.
When LexLint raises it
generates_content
Read the law
Every line above is drawn from the primary source linked here, read on the date shown. This is a research summary, not legal advice.