Personal data has become the currency of the digital age, according to Maria Christofidou, the newly appointed Personal Data Protection Commissioner of Cyprus. In her first interview, she highlighted the growing threat of cyberattacks driven by the increasing value of personal information.

Photo: in-cyprus.philenews.com
Personal data: The Rise of Cyber Threats
Christofidou explained that technological advancements have introduced new challenges, with her office frequently receiving complaints about data breaches on social media and unsolicited advertisements. Recently, a complaint was lodged against MEP Fidias Panayiotou by a Paralympic athlete concerning the use of his image in a video apology for misleading statements about athletes with intellectual disabilities. “The basic principle is clear: when we use someone’s image or data, we must respect their dignity and rights,” she stated.
Challenges in the Digital Landscape
Cyberattacks, defined as malicious, unauthorised attempts to exploit vulnerabilities in systems, pose significant threats beyond healthcare. Christofidou pointed out that these attacks aim to damage reputations and extract financial gains. She underscored the importance of protecting patient data, which is treated as sensitive under European regulations.
Personal Responsibility in Data Protection
Citizens can take proactive steps to safeguard their personal data, according to the Commissioner. Simple habits, such as regularly updating privacy settings and being cautious about the organisations with which they share their information, can significantly reduce risks. “Choosing organisations that operate transparently and have clear data protection policies creates trust,” she advised.
Understanding Complaints and Legal Protections
Each complaint received by Christofidou’s office is treated with seriousness, as behind each one lies an individual who feels their rights have been violated. In Cyprus, many complaints arise from unsolicited promotional messages and the unauthorised sharing of personal data on social media. Addressing these issues is crucial, especially during election periods when political data processing intensifies.
Age Limit Debates and Digital Literacy
The discussion surrounding age limits for personal data consent is ongoing, with proposals to raise the limit from 14 to 16 years. However, Christofidou believes that meaningful protection is not solely reliant on age, but rather on enhancing digital literacy and encouraging collaborative efforts between families, schools, and the state.
Legal Framework and Future Developments
Christofidou expressed satisfaction with the current level of GDPR compliance among organisations in Cyprus, particularly in key sectors such as healthcare and finance. The Commissioner’s Office continues to monitor compliance through regular audits and is committed to providing ongoing education and support for businesses.
As new data protection legislation develops, discussions are underway regarding the definition of personal data and how to balance innovation with citizens’ rights. The evolving nature of data protection reflects society’s effort to keep pace with the digital age while safeguarding fundamental rights.
