July 4, 2026, finds Europe at a critical juncture for its digital sovereignty. With the full implementation of the European Artificial Intelligence Act (EU AI Act), attention has shifted from Brussels to Athens. The question looming over the Maximos Mansion and the Ministry of Digital Governance is clear yet complex: Who will have the upper hand in controlling algorithms on Greek soil?

The Search for the Regulatory Authority

Despite the preparatory work by the Advisory Committee on Artificial Intelligence, led by Professor Constantinos Daskalakis, the landscape remains blurred. Greece is required to designate a national supervisory authority to ensure company compliance with the new rules. The options are two: either the creation of a new, autonomous body or the expansion of the powers of an existing authority, such as the Hellenic Data Protection Authority (HDPA).

The problem with the second solution is the Authority's already heavy agenda. With the explosion of cybersecurity and data protection cases, adding the oversight of 'high-risk' AI systems could lead to administrative paralysis. On the other hand, a new body requires time, staffing with specialized personnel (which is scarce), and significant resources from the state budget.

The 'Gray Zones' of Enforcement

One of the most significant 'gray zones' concerns the use of AI by public authorities. The Regulation strictly prohibits social scoring and predictive policing but leaves windows for the use of real-time biometric identification for national security reasons. In Greece, the debate over surveillance and state monitoring is still fresh, making the application of these exceptions a political 'minefield'.

  • Who will monitor whether an algorithm used by the police is truly transparent?
  • How will it be ensured that Greek citizens' data is not used for training models without their consent?
  • What will be the process for businesses wishing to enter the 'Regulatory Sandbox' for innovation?
"Artificial Intelligence is not just a productivity tool; it is a new way of exercising power. If its oversight in Greece is conducted in terms of bureaucratic past, we will fail twice: both in protecting rights and in fostering growth," says a source close to the consultation.

The Challenge for Small and Medium Enterprises (SMEs)

For the Greek market, which consists of 95% SMEs, the cost of compliance with the AI Act is the 'elephant in the room'. Requirements for technical documentation, risk management, and human oversight are burdensome for a startup or a small IT company. If the Greek state does not immediately create the infrastructure for the 'Regulatory Sandbox', innovation risks migrating to countries with more flexible frameworks.

Furthermore, there is the risk of 'Forum Shopping'. If Greece adopts an overly strict or vague interpretation of the Regulation, large tech companies will prefer to declare headquarters in other EU countries, depriving the country of investments and expertise. The balance between security and competitiveness is the big bet of 2026.

Conclusion

Greece stands at a crossroads. The success of the Greek AI Act will not be judged by declarations, but by the state's ability to staff an authority that understands code as well as the law. Without clarity in responsibilities and without support for domestic creators, Artificial Intelligence in Greece will remain a 'gray zone' between the promises of the future and the rigidities of the present.