Overview
The Law 125(I)/2018 on the Protection of Natural Persons with Regard to the Processing of Personal Data and the Free Movement of Such Data is Cyprus's national data protection law that supplements and implements the European Union General Data Protection Regulation (GDPR). Enacted in 2018, the law establishes the legal framework for the lawful processing of personal data, the protection of individuals' privacy rights, and the free movement of personal data within the European Union. It defines the responsibilities of data controllers and processors, provides rules for the processing of personal and sensitive data, establishes supervisory and enforcement powers for the Commissioner for Personal Data Protection, and sets national provisions in areas where the GDPR permits member-state legislation. The law aims to ensure transparent, secure, and accountable handling of personal data while safeguarding the fundamental rights and freedoms of individuals.