Panagiota Kiortsi

Panagiota Kiortsi is a lawyer specializing in Public Law, Human Rights, Information Technology Law, and Data Protection. She is a certified Data Protection Officer (DPO) and collaborates with both public and private sector entities to ensure compliance with the legal framework on personal data protection and digital operational resilience.

She graduated from the Faculty of Law of the National and Kapodistrian University of Athens. In 2012, she obtained her master’s degree in public law at the same Institution and in 2022 she completed her doctoral dissertation on the topic: “The Limits of State Supervision and Intervention on Social Networking Platforms.”

She participates in national and international scientific research projects as a researcher and publishes regularly in scientific journals and conference proceedings. In 2021, she was awarded a research fellowship under the project “Legal Issues of Big Health Data Processing under the General Data Protection Regulation (GDPR) 679/2016” (MIS 5047861), co-funded by the European Union under the Operational Programme “Human Resources Development, Education and Lifelong Learning 2014–2020”

Her research interests include personal data protection, artificial intelligence, cybersecurity, digital operational resilience and legal issues emerging from the use of Social Networking Sites.

Since 2020, she has been a facilitator in the “Data Protection Officer Training Program” at the Centre for Education and Lifelong Learning of the Aristotle University of Thessaloniki (AUTH).

She has been a facilitator in the educational programme “Data Protection Officers and General Data Protection Regulation (GDPR) Compliance Training” at the Centre for Education and Lifelong Learning of Aristotle University of Thessaloniki since 2020.

Furthermore, since September 2025, she has been serving as a facilitator in the educational programme “Compliance with the Artificial Intelligence Act” at the Centre for Education and Lifelong Learning of the same University, delivering lectures on the topic “Algorithmic Impact Assessment.”
During the period 2023–2024, she delivered lectures on “Online Hate Speech” within the educational programme “Cybercrime and Cybersecurity” at the Aristotle University of Thessaloniki at the Centre for Education and Lifelong Learning.
For all the above educational programmes, she was responsible for developing the educational material, as well as preparing specialized exercises.
Finally, in 2023, she participated in the DYPA programme “Personal Data Protection and Security,” which was implemented by the Centre for Lifelong Learning (KEΔΙΒΙΜ) of the Aristotle University of Thessaloniki in collaboration with EOPEP Lifelong Adult Development.

At the Law School of York Europe Campus, she teaches the module “Data Protection Law and Internet Law” as part of the Undergraduate Programme titled “Greek Law with Common Law” and the module “Personal Data Protection Law” as part of the Postgraduate Programme titled “LLM in Business Law.”

Her research interests include Personal Data Protection, Regulatory Framework for Large, Language Models (LLMs) and AI, Big Health Data, Digital Rights, Social Networking Sites.

Funded Research Projects:

2025: Research participation in the research project: “Design Development and Evaluation of an Integrated Information System and Real Time Services for the detection of Telephone Fraud (Vishing) Protecting Personal Data” 

2023–2025: Postdoctoral research in the research project: “Artificial Intelligence-driven Framework and Legal Advice Tools for Phishing Prevention and Mitigation in Information Systems (AILA – PROJECT ID: 15440)”

2019–2021: Research fellowship in the research project: “Legal Issues of Big Health Data Processing under the General Data Protection Regulation (GDPR) 679/2016” (MIS 5047861), co-funded by the European Union under the Operational Programme “Human Resources Development, Education and Lifelong Learning 2014–2020”

2018–2020: Research participation in the European research project: “Action Grants to Support Training Activities on the Data Protection Reform – TRAIN GR-CY”, under the European Union’s Rights, Equality and Citizenship Programme (2014–2020)

A. Selected Articles in Law Reviews or Chapters in Books

1. Kiortsi, P., Iglezakis, I., Feidas, C., Kosmopoulos, D., Thomopoulos, G., Is Regulating LLM Hallucinations Elusive? A Legal and Ethical Approach, (forthcoming).
2. Kiortsi, P., Every Breath You Take: Privacy and Personal Data Protection on Social Networking Sites, in collective volume From Television to New Media and Greek Society, ed. T. Doulkeri, Papazisis Publications, Athens, 2014.
3. Kiortsi, P., The global History of Social Networks Sites through the Lens of Comparative Constitutional Law, in collective volume History of Information: From Papyrus to the Electronic Document, Nomiki Vivliothiki Publications, 2014.
4. Kiortsi, P., Freedom of Expression and Censorship on Social Networking Sites, in collective volume Information Law, Legal Tech and Data Protection – 4th Panhellenic Conference, ed. E-THEMIS & University of Macedonia, Nomiki Vivliothiki Publications Athens, 2013.
5. Kiortsi, P., Surveillance Cameras and Personal Data, in 2nd Joint Constitutional Seminar – Koryschades, Evrytania (12 March 2010), National and Kapodistrian University of Athens & Aristotle University of Thessaloniki, LL.M. in collective volume Public Law, Sakkoulas Publishers, Athens–Thessaloniki, 2011.
6. Kiortsi, P., Freedom of Expression and Censorship on Social Media Platforms, To Syntagma, Issue 3–4, 2014.
7. Katoikos, I., Kosmopoulos, D., Iglezakis, I., Kiortsi, P., Thomopoulos, G., Fidas, C., PhishBENCH: A Benchmark for Legal Tasks Related to Phishing Attacks, accepted as a full paper in the Proceedings of the 37th IEEE International Conference on Tools with Artificial Intelligence (ICTAI 2025).
8. Thomopoulos, G., Kiortsi, P., Sigalas, D., Kosmopoulos, D., Iglezakis, I., Fidas, C., Developing an Anti-Phishing Large Language Model: A Focus Group Study on Human, Technological, and Legal Factors, ISA 2024 – 15th International Conference on Information, Intelligence, Systems and Applications, 17–19 July 2024, Chania, Greece.
9. Kiortsi, P., Iglezakis, I., Feidas, C., Kosmopoulos, D., Thomopoulos, G., The Regulation of Large Language Models (LLMs) under Regulation (EU) 2024/1689 on Artificial Intelligence and the GDPR, Cyberlaw by CIJIC (Cyberlaw Research Centre, University of Lisbon School of Law), ISSN 2183-7295, 2024.
10. Iglezakis, I., Trokanas, Th., Kiortsi, P., The Right Not to Be Subject to Automated Individual Decision-Making/Profiling Concerning Big Health Data: Developing an Algorithmic Culture, International Journal of Data Science & Big Data Analytics, Vol. 1, Issue 3, 2021. DOI: 10.51483/IJDSBDA.1.3.2021.6-14
11. Iglezakis, I., Trokanas, Th., Kiortsi, P., Big Health and Genetic Data: Opportunities, Risks, and Legal Conundrums regarding the Application of the GDPR, Journal of Internet Law (Wolters Kluwer), Vol. 24, Issue 10, 2021.
12. Kiortsi, P., “Diavgeia”: The Hellenic Data Protection Authority Imposes a Fine (Decision No. 21/2021), Review of Information Law, Vol. 2, Issue 1, 2021.