Can you briefly introduce your organisation — mission, expertise, and core activities?

The Hellenic Data Protection Authority (HDPA) is an independent public authority in Greece. It oversees the application of the GDPR and other laws that protect personal data. Its role is to ensure that people’s personal information is handled lawfully and that their rights are respected.

What specific role or responsibilities does your team have within XTRUST-6G?

We provide guidance on privacy and personal data issues, including how personal data is used in AI systems and how privacy-enhancing technologies should operate in realistic scenarios.

Our role is to support the project from an early stage, helping to build it in a way that protects personal data from the outset. We examine the relevant legal frameworks to identify the requirements that must be followed and consider ethical issues, ensuring that the XTRUST-6G platform fully complies with data protection rules by design and by default.

How would you explain XTRUST-6G’s main mission to someone unfamiliar with the project?

XTRUST-6G is a European research project focused on making future mobile networks safer and more trustworthy. It explores new ways to protect these networks from cyberattacks, ensuring that systems operate reliably and securely as technology evolves, while fully respecting fundamental human rights such as privacy and personal data protection.

Are you engaged in any pilot implementations or real-world demonstrations related to XTRUST-6G?

The HDPA will participate in all pilot activities, providing guidance and support on compliance with data protection laws.

As the concept of “personal data” covers a wide range of information, and given that XTRUST-6G uses advanced technologies such as machine learning and blockchain to detect and prevent security threats, different legal frameworks may apply. These include the GDPR, the ePrivacy Directive, the AI Act, and other relevant legislation.

For this reason, it is essential to design the system with strong data protection safeguards from the outset and ensure compliance with all applicable legal requirements.

How has your experience collaborating with partners across industry and academia been so far?

Our experience collaborating with partners from both industry and academia has been very positive so far.

Through this cooperation, we gain valuable insights into emerging technologies and innovative technical approaches. This helps us better understand how new systems are designed and how they function in practice.

At the same time, we contribute our expertise in data protection and regulatory compliance. In particular, we help translate legal requirements into practical and implementable measures, ensuring that privacy and data protection principles are effectively integrated into the technical design.

This mutual exchange of knowledge strengthens the project overall and supports the development of solutions that are both innovative and legally compliant.

Why is it important to communicate XTRUST-6G results to wider audiences such as policymakers, industry stakeholders, and the general public?

It is important to communicate XTRUST-6G results to wider audiences because the project addresses technologies that will directly impact society.

For policymakers, clear communication helps them better understand technological developments and their implications. This supports informed decision-making and the development of appropriate regulatory frameworks.

For industry stakeholders, sharing results promotes the adoption of secure and privacy-respecting solutions. It also provides practical guidance on how innovation can be aligned with legal and ethical requirements from the outset. By communicating the project’s findings, industry actors can better integrate privacy and data protection principles into their products and services from the early design stages, reducing legal risks and strengthening user trust.

For the general public, transparency builds trust. People need to understand how new communication networks and security technologies work, how their personal data may be involved, and what safeguards are in place.

Have you participated in any dissemination activities (events, workshops, or press engagement) so far?

The HDPA regularly publishes newsletters that include relevant references to the project. In addition, in 2025, we launched an annual “Research Day” event, during which we also communicated the XTRUST-6G project to researchers and academia.

What does success look like for XTRUST-6G from your perspective?

From our perspective, as a data protection authority, success for XTRUST-6G means delivering solutions that are secure, trustworthy, and fully respectful of fundamental rights.

Security is a central objective of the project, but in our view, genuine trust in future 6G networks can only be achieved when strong data protection safeguards are embedded into the technologies themselves.

Success therefore requires that privacy and security are developed together from the outset. Data protection by design and by default should be an integral part of all technical solutions, ensuring that only the necessary data are processed, risks are carefully assessed, and appropriate technical and organisational measures are implemented.

It also involves clear compliance with applicable legal frameworks, including the GDPR and other relevant legislation. This includes transparency, accountability, proper governance structures, and thorough risk assessment procedures, particularly where advanced technologies such as AI are used.

Moreover, success would be reflected in a stronger understanding among technical partners and industry stakeholders that innovation, security, and data protection reinforce one another. If the project demonstrates in practice that advanced cybersecurity solutions can be both highly effective and fully compliant with legal requirements, it will provide a valuable model for future digital infrastructure projects.

Ultimately, success for XTRUST-6G would be the development of resilient and trustworthy 6G solutions that strengthen network security while fully safeguarding individuals’ rights and freedoms.