To whom it is addressed
Services provided
Debtors and creditors can access CCR data through the provision of credit reports, which are produced following submission of a relevant online application.
The CCR allows debtors to challenge the content or completeness of the credit report concerning them and to have inaccurate identification or credit information corrected and missing credit information completed, following submission of a relevant online request.
The Central Credit Register was established and operates under Law 4972/2022, while it is also governed by the specific provisions set out in the relevant Bank of Greece Governor’s Acts.
The Bank of Greece collects and processes personal data solely for CCR operation purposes, taking into account the applicable institutional framework for the protection of personal data, data confidentiality and security.
What is the Central Credit Register?
The Central Credit Register (CCR) is an integrated information system which collects and stores, at a granular level, the payment history, the different types of collateral provided and any other information related to all forms of credit granted to natural or legal persons by credit and, in general, financial institutions that have their registered office in Greece and by branches of foreign credit or financial institutions operating in Greece. The Bank of Greece is the owner and operator of the CCR.
Why is the CCR important?
The primary aim of the CCR is to enhance the financing of the real economy by the Greek financial system and to safeguard financial stability by improving the quality of available information, thereby enabling a more rational assessment of the creditworthiness of potential debtors and contributing to more informed decision-making in relation to credit granting. At the same time, the operation of the CCR promotes the objectives of the European System of Central Banks (ESCB) and supports the supervisory functions of the Bank of Greece and of the European Central Bank (ECB).
- For debtors
By obtaining a credit report and accessing their credit data, debtors are given an overview of their credit status and exposure to all creditors reporting data to the CCR.
- For creditors
Creditors that are connected to the CCR use the data made available to them, in order to improve the quality and completeness of credit information about debtors with whom they have signed or are about to sign a credit agreement, thus enhancing their credit risk assessment and management capabilities.
Which is the institutional framework governing its operation?
The Central Credit Register was established and operates under Law 4972/2022, while it is also governed by the specific provisions set out in the relevant Bank of Greece Governor’s Acts. Law 5042/2023 (Government Gazette A 88/10.04.2023) and, in particular, Articles 61, 62 and 63 thereof, amended certain provisions of Articles 113, 115, 118 and 122 of Law 4972/2022. As expressly specified in Law 4972/2022, the GDPR and Law 4624/2019 (Government Gazette A 137/29.08.2019) shall apply to any processing of a natural person’s data, especially credit information that is collected and held in the Central Credit Register. According to the enabling provisions of Law 4972/2022 (Article 122), individual issues regarding the operation of the Central Credit Register shall be further specified in an act of the Governor of the Bank of Greece. To this end, Bank of Greece Governor’s Acts Nos. 2692/30.06.2023, 2697/11.12.2025 and 2698/12.12.2025 were issued.
What kind of data does it contain?
The CCR collects on a monthly basis and stores granular data about any form of credit equal to or exceeding the amounts of EUR 5,000 (per creditor and per debtor) for legal persons and EUR 2,000 (per creditor and per debtor) for natural persons and sole proprietorships.
The different types of credit on which data are collected include, among other things, housing, consumer and business loans, leasing and factoring contracts, as well as the collateral provided for them. The CCR ensures data confidentiality, while providing modern digital information services.
Who provides the data?
The data held in the CCR are drawn exclusively from the monthly reporting of creditors, which comprise all credit and, in general, financial institutions that have their registered office in Greece (including their branches abroad), as well as the branches of foreign credit or financial institutions operating in Greece.
An indicative but non-exhaustive list of creditors with CCR reporting obligations is provided below:
- Credit institutions established in Greece;
- Branches in Greece of credit institutions established abroad;
- Credit servicing firms;
- Credit companies;
- Factoring companies;
- Leasing companies;
- Card issuing and management companies;
- Credit agencies;
- Microfinance institutions;
- Payment institutions;
- E-money institutions;
- Other financial institutions.
At the same time, the necessary identification information as well as general information on debtors are cross-checked against data drawn from government entities, such as the Independent Authority for Public Revenue (IAPR), the General Commercial Register (G.E.MI.) and the ERGANI information system.
Who can access the data?
Interested parties that are entitled to use the CCR services, for the purposes of either providing or accessing data, fall into the following categories:
Creditors, that submit data to the CCR on a monthly basis in accordance with Law 4972/2022 but can also draw data from it, in order to assess debtors’ credit risk.
Debtors, who request and are granted access exclusively to the data concerning them. These include any legal or natural persons/sole proprietorships that either owe pecuniary debts to creditors, or are guarantors to a third-party debt, or just apply for a credit report, regardless of whether the CCR holds data or not.
Government entities, that comprise specific organisations of the Greek State and are granted access to CCR data in order to perform their tasks.
The Bank of Greece and the ECB, that have access to CCR data, to the extent necessary, in order to carry out their tasks.
Who is the data controller?
The Data Controller is the Bank of Greece, with registered office in Athens (21 El. Venizelos Street, GR-102 50, tel. +30 210 320 1111).
Who is responsible for the accuracy of the data?
To ensure the accuracy, completeness and validity of CCR data, a two-step check and validation of collected data is envisaged: first, by applying a set of automated operational rules and checks as regards data completeness and validity and, at a later stage, using methodologies of appropriate statistical testing. In cases where incomplete or inaccurate data are detected, creditors are notified to submit rectifying data. In addition, the Bank of Greece cross-checks, where possible, the identification information and general information of counterparties against data from the information systems of the IAPR, the G.E.MI. and ERGANI, or any other competent government entity, in accordance with Article 7 of Bank of Greece Governor’s Act No. 2697/11.12.2025.
Data provided to the CCR by creditors, that pass all the checks mentioned in the above paragraph, are deemed accurate. Data are modified exclusively at source by creditors, that update them afterwards in the CCR database by providing rectifying data.
Where can I find out more about the CCR?
Further information about the CCR is available here.