Dall-eThis page keeps a practical directory of data protection authorities with official links. Its main purpose is to help readers quickly find the competent authority when they need to check guidance, file a complaint, review regulatory criteria, assess an international transfer or identify the privacy regulator in another jurisdiction.
Authority names, powers and official domains may change. For that reason, this directory combines direct links to national regulators with official reference sources such as the European Data Protection Board, the Global Privacy Assembly, GPEN and the Ibero-American Data Protection Network.
In this article we will discuss...
Official sources for checking authorities
- EDPB: EU and EEA data protection authorities.
- GPEN: international privacy enforcement authorities listing.
- Global Privacy Assembly: global forum of data protection and privacy authorities.
- RIPD: data protection authorities and bodies in Ibero-America.
Data protection authorities in the European Union and the EEA
| Country or body | Supervisory authority | Official link |
|---|---|---|
| European Union | European Data Protection Supervisor (EDPS) | www.edps.europa.eu |
| Spain | Spanish Data Protection Agency (AEPD) | www.aepd.es |
| Germany | Federal Commissioner for Data Protection and Freedom of Information (BfDI) | www.bfdi.bund.de |
| Austria | Österreichische Datenschutzbehörde (DSB) | www.dsb.gv.at |
| Belgium | Data Protection Authority / Gegevensbeschermingsautoriteit | www.autoriteprotectiondonnees.be |
| Bulgaria | Commission for Personal Data Protection (CPDP) | www.cpdp.bg |
| Croatia | Agencija za zaštitu osobnih podataka (AZOP) | azop.hr |
| Cyprus | Commissioner for Personal Data Protection | www.dataprotection.gov.cy |
| Czechia | Úřad pro ochranu osobních údajů (ÚOOÚ) | www.uoou.cz |
| Denmark | Datatilsynet | www.datatilsynet.dk |
| Slovakia | Office for Personal Data Protection | dataprotection.gov.sk |
| Slovenia | Information Commissioner | www.ip-rs.si |
| Estonia | Andmekaitse Inspektsioon | www.aki.ee |
| Finland | Office of the Data Protection Ombudsman | tietosuoja.fi |
| France | Commission Nationale de l’Informatique et des Libertés (CNIL) | www.cnil.fr |
| Greece | Hellenic Data Protection Authority | www.dpa.gr |
| Hungary | National Authority for Data Protection and Freedom of Information (NAIH) | naih.hu |
| Ireland | Data Protection Commission (DPC) | www.dataprotection.ie |
| Italy | Garante per la protezione dei dati personali | www.garanteprivacy.it |
| Latvia | Data State Inspectorate | www.dvi.gov.lv |
| Lithuania | State Data Protection Inspectorate | vdai.lrv.lt |
| Luxembourg | National Commission for Data Protection (CNPD) | cnpd.public.lu |
| Malta | Information and Data Protection Commissioner (IDPC) | idpc.org.mt |
| Netherlands | Dutch Data Protection Authority | autoriteitpersoonsgegevens.nl |
| Poland | Personal Data Protection Office (UODO) | uodo.gov.pl |
| Portugal | National Data Protection Commission (CNPD) | www.cnpd.pt |
| Romania | National Supervisory Authority for Personal Data Processing | www.dataprotection.ro |
| Sweden | Swedish Authority for Privacy Protection (IMY) | www.imy.se |
| Norway | Datatilsynet | www.datatilsynet.no |
| Iceland | Persónuvernd | www.personuvernd.is |
| Liechtenstein | Data Protection Office | www.datenschutzstelle.li |
Data protection authorities in other European countries
| Country | Supervisory authority | Official link |
|---|---|---|
| United Kingdom | Information Commissioner’s Office (ICO) | ico.org.uk |
| Switzerland | Federal Data Protection and Information Commissioner (FDPIC/EDÖB) | www.edoeb.admin.ch |
| Andorra | Andorran Data Protection Agency (APDA) | www.apda.ad |
| Monaco | Commission de Contrôle des Informations Nominatives (CCIN) | www.ccin.mc |
| North Macedonia | Agency for Personal Data Protection | azlp.mk |
| Albania | Information and Data Protection Commissioner | www.idp.al |
| Serbia | Commissioner for Information of Public Importance and Personal Data Protection | www.poverenik.rs |
| Moldova | National Center for Personal Data Protection | datepersonale.md |
| Georgia | Personal Data Protection Service | personaldata.ge |
| Ukraine | Ukrainian Parliament Commissioner for Human Rights | ombudsman.gov.ua |
Data protection authorities in the Americas
| Country or jurisdiction | Authority | Official link |
|---|---|---|
| Canada | Office of the Privacy Commissioner of Canada (OPC) | www.priv.gc.ca |
| United States | Federal Trade Commission (FTC) | www.ftc.gov |
| California | California Privacy Protection Agency (CPPA) | cppa.ca.gov |
| Argentina | Agency for Access to Public Information (AAIP) | www.argentina.gob.ar/aaip |
| Brazil | National Data Protection Authority (ANPD) | www.gov.br/anpd |
| Uruguay | Personal Data Regulatory and Control Unit (URCDP) | www.gub.uy/unidad-reguladora-control-datos-personales |
| Colombia | Superintendence of Industry and Commerce (SIC) | www.sic.gov.co |
| Peru | National Personal Data Protection Authority | www.gob.pe/anpd |
| Chile | Council for Transparency | www.consejotransparencia.cl |
| Ecuador | Superintendence of Personal Data Protection | www.spdp.gob.ec |
| Costa Rica | Data Protection Agency of Inhabitants (PRODHAB) | www.prodhab.go.cr |
| Panama | National Authority for Transparency and Access to Information (ANTAI) | www.antai.gob.pa |
Data protection authorities in Asia-Pacific
| Country or jurisdiction | Authority | Official link |
|---|---|---|
| Australia | Office of the Australian Information Commissioner (OAIC) | www.oaic.gov.au |
| New Zealand | Office of the Privacy Commissioner | www.privacy.org.nz |
| Japan | Personal Information Protection Commission (PPC) | www.ppc.go.jp |
| South Korea | Personal Information Protection Commission (PIPC) | www.pipc.go.kr |
| Singapore | Personal Data Protection Commission (PDPC) | www.pdpc.gov.sg |
| Hong Kong | Privacy Commissioner for Personal Data (PCPD) | www.pcpd.org.hk |
| Philippines | National Privacy Commission (NPC) | privacy.gov.ph |
| Thailand | Personal Data Protection Committee | www.pdpc.or.th |
| Malaysia | Department of Personal Data Protection | www.pdp.gov.my |
| Macao | Office for Personal Data Protection | www.dspdp.gov.mo |
Data protection authorities in Africa and the Middle East
| Country or jurisdiction | Authority | Official link |
|---|---|---|
| South Africa | Information Regulator | inforegulator.org.za |
| Kenya | Office of the Data Protection Commissioner (ODPC) | www.odpc.go.ke |
| Nigeria | Nigeria Data Protection Commission (NDPC) | ndpc.gov.ng |
| Morocco | National Commission for the Control of Personal Data Protection (CNDP) | www.cndp.ma |
| Tunisia | National Authority for Personal Data Protection (INPDP) | www.inpdp.tn |
| Mauritius | Data Protection Office | dataprotection.govmu.org |
| Ghana | Data Protection Commission | www.dataprotection.org.gh |
| Israel | Privacy Protection Authority | www.gov.il/en/departments/the_privacy_protection_authority/govil-landing-page |
| Türkiye | Personal Data Protection Authority (KVKK) | www.kvkk.gov.tr |
| DIFC – Dubai | DIFC Commissioner of Data Protection | www.difc.ae/business/operating/data-protection |
| ADGM – Abu Dhabi | Office of Data Protection | www.adgm.com/operating-in-adgm/office-of-data-protection |
How to use this directory
For ordinary checks, the national authority link will usually be enough. For cross-border GDPR processing, it is also useful to check the lead supervisory authority criteria and the EDPB materials. For non-European jurisdictions, international networks such as GPEN, GPA and RIPD help verify whether there is an accredited authority, whether competence is national, regional or sector-specific, and whether the regulator has changed name.
Before filing a formal complaint or regulatory communication, always check the authority’s official website because forms, accepted languages, electronic filing systems and requirements may vary.
Does your company need a Data Protection Officer? We act as external DPO for companies and over 30 schools in Spain. See our DPO service.
