Data protection commissioner issues guidelines on campaign communications

On April 4, 2026, the Personal Data Protection Commissioner of Cyprus, Maria Christofidou, addressed rising public complaints regarding unsolicited campaign SMS and phone calls ahead of the parliamentary elections. Christofidou clarified that even holiday greeting messages sent by candidates are categorized as political promotion. Candidates and political parties are legally required to comply with data protection laws and anti-spam legislation, specifically Article 106 of Law 112(I)/2004. The commissioner emphasized that lists must be accurate and updated, and that candidates may only contact members of their own party. Every political message must provide a mechanism for recipients to opt-out, such as a 'STOP SMS' option. Furthermore, the sharing of party membership databases with independent candidates is strictly prohibited. Political parties are held responsible for maintaining their member lists, and the Commissioner’s office warned that failure to adhere to these regulations could lead to significant financial penalties.