Databases with patient information exist in the city of Thessaloniki for 14 years and in Athens for 9 years, without including photos of the victims though. GDPR issues need to be discussed in order to explore a legal basis for adding photos of the victims – not for identifying them, but for recording their injuries.