Κυβερνοασφάλεια και προστασία δεδομένων : σχέση αλληλοσυμπλήρωσης ή/και αντίθεσης;

Φαφαλιού, Άννα

Cybersecurity and data protection : a complementary and/or opposing relationship?

Master Thesis

Author

Φαφαλιού, Άννα

Date

2025-06

Abstract

This master’s thesis explores the relationship between data protection and cybersecurity, two interdependent fields that shape the architecture of the modern digital rule of law. As technological developments, geopolitical shifts, and regulatory transformations progress, the convergence—and at times tension—between privacy and security frameworks has emerged as a crucial challenge for both public governance and private sector accountability. The study first analyzes the legal and regulatory foundations of both domains, focusing on key European legislative instruments such as the General Data Protection Regulation (GDPR), the NIS 2 Directive on network and information systems security, and the Digital Operational Resilience Act (DORA). The thesis then develops a theoretical foundation for understanding the symbiotic relationship between cybersecurity and data protection, through concepts such as risk-based accountability, privacy and security by design/default, and digital sovereignty. Landmark case law, including Schrems I & II and the German Federal Constitutional Court’s Volkszählungsurteil, are analyzed as legal touchstones that define the boundaries of informational self-determination in democratic societies. A comprehensive review of data breach incidents is presented, both in Greece and internationally, highlighting the scope, impact, and response mechanisms to cyberattacks across different sectors. These case studies illustrate the operational challenges of compliance, the effectiveness of institutional coordination, and the necessity for resilience mechanisms in both critical infrastructure and public administration. The study also examines emerging technological paradigms—including Artificial Intelligence, Blockchain, and Zero Trust architecture—as transformative forces that challenge traditional data governance and raise novel legal and ethical questions. Finally, the thesis concludes with a normative and philosophical reflection on the future of digital governance. It argues for holistic and adaptive policy approaches that bridge regulatory silos, enhance institutional transparency, and uphold fundamental rights in the digital age. 13 Building on principles drawn from political philosophy—such as Rawlsian justice, Habermasian deliberative democracy, and Arentian plurality—the thesis advocates for a democratic ethos of technology that foregrounds human dignity, institutional trust, and strategic autonomy for the European Union in a fragmented digital world.

Postgraduate Studies Programme

Δίκαιο και Τεχνολογίες Πληροφορικής και Επικοινωνιών (MSc in Law and Information and Communication Technologies)

Department

Σχολή Τεχνολογιών Πληροφορικής και Επικοινωνιών. Τμήμα Ψηφιακών Συστημάτων

Number of pages

116

Language

Greek

URI

https://dione.lib.unipi.gr/xmlui/handle/unipi/18826

Collections

Τμήμα Ψηφιακών Συστημάτων

Show full item record

Except where otherwise noted, this item's license is described as
Αναφορά Δημιουργού-Μη Εμπορική Χρήση-Όχι Παράγωγα Έργα 3.0 Ελλάδα