GDPR compliance in Cyprus

Companies that handle personal data need privacy notices, records and contracts with processors. We prepare the documents and processes.

ForCompanies with client data
CoversPolicies, records, DPAs
AuthorityCommissioner for Personal Data Protection
Check my case for freeSee the steps
Limassol seafront towers and marina on a sunny morningChecked 24 October 2026

Steps and timeline

  1. 1

    Data map

    What you collect and why.

    1 week
  2. 2

    Documents

    Policies, notices, contracts and a breach procedure: a notifiable breach is reported to the Commissioner without undue delay and, where feasible, within 72 hours.

    2 weeks

Who does what

What you do

  • Share your situation and goals
  • Collect documents from home
  • Agree the scope of work in writing

What we do

  • Check the requirements for your case
  • Prepare the documents and file the application
  • Follow up until the decision

Your coordinator

  • Plans the work and next steps
  • Keeps one timeline for everything
  • Reminds you of renewals and deadlines

What affects the cost

The price depends on your situation. We explain the scope and expected costs before work begins.

Your situationNumber of peopleUrgency

Questions

Do small companies need it?

Yes, GDPR applies regardless of size, and processing staff data regularly already needs a record of processing. A data protection officer is mandatory only for public bodies, or when your core activities involve large-scale monitoring of people or large-scale processing of sensitive or criminal-record data.

Sources

Figures checked 24 October 2026. Rules change: we confirm them for your case before you act.

Check your case for free

A coordinator replies within one working day with the next steps.

ServicesSearchCheck my case