Home › Knowledge Hub › Regulators & Authorities

Knowledge Hub

Data protection regulators & authorities by country

The primary data protection regulators and supervisory authorities relevant to organisations operating across the UK, Europe, the Middle East, Africa, the Americas and Asia-Pacific — with direct links to official sites. Some jurisdictions involve multiple authorities depending on sector; the bodies below are the primary privacy/data protection regulators in their jurisdictions.

Compiled & maintained by VulaPri Limited, a UK privacy consultancy · Last verified 16 June 2026

Oversight bodies
RegionShortAuthorityOfficial site
Council of EuropeCoECouncil of Europecoe.int
Council of EuropeECtHREuropean Court of Human Rightsechr.coe.int
European UnionCJEUCourt of Justice of the European Unioncuria.europa.eu
European UnionEDPBEuropean Data Protection Boardedpb.europa.eu
European UnionEDPSEuropean Data Protection Supervisoredps.europa.eu
European regulators
CountryShortAuthorityOfficial site
AlbaniaIDPInformation and Data Protection Commissioneridp.al
AndorraAPDAAndorran Data Protection Agency (Agència Andorrana de Protecció de Dades)apda.ad
AustriaDSBDatenschutzbehördedsb.gv.at
BelgiumGBA / APDData Protection Authority (Gegevensbeschermingsautoriteit / Autorité de protection des données)dataprotectionauthority.be
Bosnia and HerzegovinaAZLP BiHPersonal Data Protection Agency of Bosnia and Herzegovinaazlp.ba
BulgariaCPDPCommission for Personal Data Protectioncpdp.bg
CroatiaAZOPPersonal Data Protection Agency (Agencija za zaštitu osobnih podataka)azop.hr
Cyprus—Office of the Commissioner for Personal Data Protectiondataprotection.gov.cy
CzechiaÚOOÚOffice for Personal Data Protection (Úřad pro ochranu osobních údajů)uoou.gov.cz
Denmark—Datatilsynet (Danish Data Protection Agency)datatilsynet.dk
EstoniaAKIEstonian Data Protection Inspectorate (Andmekaitse Inspektsioon)aki.ee
Faroe Islands—Dátueftirlitið (Faroese Data Protection Agency)dat.fo
Finland—Office of the Data Protection Ombudsman (Tietosuojavaltuutetun toimisto)tietosuoja.fi
FranceCNILCommission Nationale de l'Informatique et des Libertéscnil.fr
GeorgiaPDPSPersonal Data Protection Servicepersonaldata.ge
GermanyBfDIFederal Commissioner for Data Protection and Freedom of Informationbfdi.bund.de
GibraltarGRAGibraltar Regulatory Authority (Information Rights Division)gra.gi
GreeceHDPAHellenic Data Protection Authoritydpa.gr
GuernseyODPAOffice of the Data Protection Authorityodpa.gg
HungaryNAIHNational Authority for Data Protection and Freedom of Informationnaih.hu
Iceland—Persónuvernd (Icelandic Data Protection Authority)personuvernd.is
IrelandDPCData Protection Commissiondataprotection.ie
Isle of Man—Information Commissioner (Isle of Man)inforights.im
ItalyGaranteGarante per la Protezione dei Dati Personaligaranteprivacy.it
JerseyJOICJersey Office of the Information Commissionerjerseyoic.org
KosovoIPAInformation and Privacy Agencyaip.rks-gov.net
LatviaDVIData State Inspectorate (Datu valsts inspekcija)dvi.gov.lv
LiechtensteinDSSDatenschutzstelle (Data Protection Authority)datenschutzstelle.li
LithuaniaVDAIState Data Protection Inspectorate (Valstybinė duomenų apsaugos inspekcija)vdai.lrv.lt
LuxembourgCNPD (LU)Commission Nationale pour la Protection des Donnéescnpd.public.lu
MaltaIDPCInformation and Data Protection Commissioneridpc.org.mt
MoldovaCNPDCPNational Center for Personal Data Protectiondatepersonale.md
MonacoAPDP (MC)Autorité de Protection des Données Personnellesapdp.mc
MontenegroAZLP (ME)Agency for Personal Data Protection and Free Access to Informationazlp.me
NetherlandsAPAutoriteit Persoonsgegevensautoriteitpersoonsgegevens.nl
North MacedoniaPDPA / AZLP (MK)Personal Data Protection Agencyazlp.mk
Norway—Datatilsynet (Norwegian Data Protection Authority)datatilsynet.no
PolandUODOPersonal Data Protection Office (Urząd Ochrony Danych Osobowych)uodo.gov.pl
PortugalCNPD (PT)Comissão Nacional de Proteção de Dadoscnpd.pt
RomaniaANSPDCPNational Supervisory Authority for Personal Data Processingdataprotection.ro
San Marino—Data Protection Authority of the Republic of San Marinogaranteprivacy.sm
SerbiaPoverenikCommissioner for Information of Public Importance and Personal Data Protectionpoverenik.rs
SlovakiaÚOOÚ SROffice for Personal Data Protection of the Slovak Republicdataprotection.gov.sk
SloveniaIP RSInformation Commissioner (Informacijski pooblaščenec)ip-rs.si
SpainAEPDAgencia Española de Protección de Datosaepd.es
SwedenIMYIntegritetsskyddsmyndigheten (Swedish Authority for Privacy Protection)imy.se
SwitzerlandFDPICFederal Data Protection and Information Commissioneredoeb.admin.ch
TurkeyKVKKPersonal Data Protection Authority (Kişisel Verileri Koruma Kurumu)kvkk.gov.tr
Ukraine—Ukrainian Parliament Commissioner for Human Rights (Ombudsman)ombudsman.gov.ua
United KingdomICOInformation Commissioner's Officeico.org.uk
Americas regulators
CountryShortAuthorityOfficial site
ArgentinaAAIPAgency for Access to Public Information (Agencia de Acceso a la Información Pública)argentina.gob.ar/aaip
BermudaPrivComOffice of the Privacy Commissioner for Bermudaprivacy.bm
BrazilANPD (BR)Autoridade Nacional de Proteção de Dadosgov.br/anpd
CanadaOPCOffice of the Privacy Commissioner of Canadapriv.gc.ca
Canada (Alberta)OIPC (AB)Office of the Information and Privacy Commissioner of Albertaoipc.ab.ca
Canada (British Columbia)OIPC (BC)Office of the Information and Privacy Commissioner for British Columbiaoipc.bc.ca
Canada (Quebec)CAICommission d'accès à l'information du Québeccai.gouv.qc.ca
Cayman Islands—Office of the Ombudsman (Cayman Islands)ombudsman.ky
ChileCPLTChilean Transparency Council (Consejo para la Transparencia)consejotransparencia.cl
ColombiaSICSuperintendence of Industry and Commerce (Superintendencia de Industria y Comercio)sic.gov.co
Costa RicaPRODHABAgency for the Protection of Inhabitants' Data (PRODHAB)prodhab.go.cr
EcuadorSPDPSuperintendency of Personal Data Protection (Superintendencia de Protección de Datos Personales)spdp.gob.ec
Mexico—Ministry of Anticorruption and Good Governancegob.mx/buengobierno
PanamaANTAINational Authority for Transparency and Access to Informationantai.gob.pa
PeruANPD (PE)National Authority for the Protection of Personal Datagob.pe/anpd
United StatesFTCFederal Trade Commissionftc.gov
United States (California)CPPACalifornia Privacy Protection Agencycppa.ca.gov
UruguayURCDPRegulatory and Personal Data Control Unit (Unidad Reguladora y de Control de Datos Personales)gub.uy/unidad-reguladora-control-datos-personales

* United States: privacy enforcement is split across multiple regulators (FTC, state Attorneys General, sector regulators). There is no single national DPA equivalent.

Spotted an authority we've missed or a link that's changed? Flag a correction or missing authority — we keep this directory current.