Your Jurisdiction at a Glance — Cyprus

GDPR + Law 125(I)/2018 on the protection of natural persons

Authority: Commissioner for Personal Data Protection

Requirements to remember

Cyprus
  • Age of digital consent: 14 years
  • Data breach notification to the Commissioner within 72 hours (Art. 33 GDPR)
  • Records of processing activities (Art. 30 GDPR)
  • Data protection impact assessment for high-risk processing (Art. 35 GDPR)

Where the programme covers them

  • Task 2 of this workshop: document Cyprus in the data protection scope document, together with sector rules and other countries you operate in
  • Workshop 2: governance, roles and the data protection officer
  • Workshop 3: records of processing activities
  • Workshop 8 and 9: risk assessment and security measures
  • Workshop 10: vendors, processors and international transfers
  • Workshop 11: data breaches and notification deadlines
ResGuard — Data Protection Workshop 1 · Task 1 · Jurisdiction: Cyprus Slide 9 of 10