Papadonikolaki-Lianos-Tsouloufas Law Firm

An Athens-based boutique legal practice, LPT Law Firm combines full-service capabilities with a strong business focus serving both domestic and foreign clients alike. Drawing on extensive international experience, LPT’s lawyers offer sophisticated and practical legal solutions across all aspects of business law tailored to both local and cross-border needs. A partner at LPT Law Firm and a dual-qualified lawyer (Attorney-at-Law, member of the Athens Bar Association, and Solicitor in England and Wales - np), Georgios Tsouloufas has over 15 years of experience in commercial, corporate, and competition law, providing expert advice to clients across a wide range of sectors, including healthcare, food and beverage, consumer goods and electronics, packaging and manufacturing, and real estate. With in-depth expertise in privacy and data protection, Georgios has assisted entities across various sectors - from financial services to the food industry - in implementing comprehensive data protection compliance programmes, ensuring the effective integration of legal, operational, and technical measures, and regularly advises them on practical data protection issues arising in their day-to-day operations. He also serves as Data Protection Officer for clients that include mental health institutions engaging in large-scale processing of sensitive data, and assists them in maintaining full compliance with applicable legal obligations.

Representatives

Georgios Tsouloufas

partner

Contact

Publications

• GREECE ADOPTS LEGISLATION IMPLEMENTING THE AI ACT: A PIVOTAL ROLE FOR THE DATA PROTECTION AUTHORITY WITHIN THE NEW REGULATORY FRAMEWORKIn July 2026, Greece adopted Law 5321/2026 (“the Law”) which introduced measures implementing Regulation (EU) 2024/1689 (“AI Act”). In line with the AI Act, the Law aims to establish an appropriate framework for achieving the effective supervision of Artificial Intelligence Systems, to ensure a high level of protection of health, safety and fundamental rights in the use of such systems, and support innovation. In particular, the Law designates, for the purposes of the AI Act, the market surveillance authorities, the single point of contact and the notifying authorities, and regulates issues relating to cooperation and coordination between the competent authorities. Moreover, the Law governs issues pertaining to AI regulatory sandboxes and testing of AI systems in real world conditions. With regards to infringements of the AI Act and the Law, effective, proportionate and dissuasive penalties are determined, while provisions relating to judicial protection and the exercise of the right to appeal against decisions issued pursuant to the AI Act and the Law are also included. In the above regulatory framework, the Hellenic Data Protection Authority is assigned a particularly important and multifaceted role.28 September 2026