Knowledge Hub

Data protection regulators & authorities by country

The primary data protection regulators and supervisory authorities relevant to organisations operating across the UK, Europe, the Middle East, Africa, the Americas and Asia-Pacific — with direct links to official sites. Some jurisdictions involve multiple authorities depending on sector; the bodies below are the primary privacy/data protection regulators in their jurisdictions.

Oversight bodies
Europe
Africa
Middle East
Americas
Asia-Pacific

Oversight bodies
Region	Short	Authority	Official site
Europe (EU)	EDPB	European Data Protection Board	edpb.europa.eu
Europe (EU)	EDPS	European Data Protection Supervisor	edps.europa.eu
Europe (EU)	CJEU	Court of Justice of the European Union	curia.europa.eu
Council of Europe	CoE	Council of Europe	coe.int
Council of Europe	ECtHR	European Court of Human Rights	echr.coe.int

European regulators
Country	Short	Authority	Official site
Austria	DSB	Datenschutzbehörde	dsb.gv.at
Belgium	APD/GBA	Belgian Data Protection Authority	dataprotectionauthority.be
Bulgaria	CPDP	Commission for Personal Data Protection	cpdp.bg
Croatia	AZOP	Personal Data Protection Agency	azop.hr
Cyprus	Commissioner	Commissioner for Personal Data Protection	dataprotection.gov.cy
Czech Republic	ÚOOÚ	Office for Personal Data Protection	uoou.cz
Denmark	Datatilsynet	Danish Data Protection Agency	datatilsynet.dk
Estonia	AKI	Estonian Data Protection Inspectorate	aki.ee
Finland	Ombudsman	Office of the Data Protection Ombudsman	tietosuoja.fi
France	CNIL	Commission Nationale de l'Informatique et des Libertés	cnil.fr
Germany	BfDI	Federal Commissioner for Data Protection and Freedom of Information	bfdi.bund.de
Greece	HDPA	Hellenic Data Protection Authority	dpa.gr
Hungary	NAIH	National Authority for Data Protection and Freedom of Information	naih.hu
Iceland	Persónuvernd	Icelandic Data Protection Authority	personuvernd.is
Ireland	DPC	Data Protection Commission	dataprotection.ie
Italy	Garante	Garante per la protezione dei dati personali	garanteprivacy.it
Latvia	DVI	Data State Inspectorate	dvi.gov.lv
Liechtenstein	DPA	Data Protection Office	datenschutzstelle.li
Lithuania	VDAI	State Data Protection Inspectorate	vdai.lrv.lt
Luxembourg	CNPD	National Commission for Data Protection	cnpd.public.lu
Malta	IDPC	Information and Data Protection Commissioner	idpc.org.mt
Netherlands	AP	Autoriteit Persoonsgegevens	autoriteitpersoonsgegevens.nl
Norway	Datatilsynet	Norwegian Data Protection Authority	datatilsynet.no
Poland	UODO	Personal Data Protection Office	uodo.gov.pl
Portugal	CNPD	National Data Protection Commission	cnpd.pt
Romania	ANSPDCP	National Supervisory Authority for Personal Data Processing	dataprotection.ro
Slovakia	ÚOOÚ SR	Office for Personal Data Protection of the Slovak Republic	dataprotection.gov.sk
Slovenia	IP-RS	Information Commissioner of the Republic of Slovenia	ip-rs.si
Spain	AEPD	Agencia Española de Protección de Datos	aepd.es
Sweden	IMY	Swedish Authority for Privacy Protection	imy.se
Switzerland	FDPIC	Federal Data Protection and Information Commissioner	edoeb.admin.ch
United Kingdom	ICO	Information Commissioner's Office	ico.org.uk

Africa regulators
Country	Short	Authority	Official site
Egypt	PDPC	Personal Data Protection Center	Official site to be confirmed
Ghana	DPC	Data Protection Commission	dataprotection.org.gh
Kenya	ODPC	Office of the Data Protection Commissioner	odpc.go.ke
Mauritius	DPO	Data Protection Office	dataprotection.govmu.org
Morocco	CNDP	National Commission for the Control of Personal Data Protection	cndp.ma
Nigeria	NDPC	Nigeria Data Protection Commission	ndpc.gov.ng
Rwanda	DPO	Data Protection and Privacy Office	dpo.gov.rw
South Africa	IR	Information Regulator (South Africa)	inforegulator.org.za
Uganda	PDPO	Personal Data Protection Office	pdpo.go.ug

Middle East regulators
Country	Short	Authority	Official site
Bahrain	PDPA	Personal Data Protection Authority	pdpa.gov.bh
Dubai (DIFC)	DIFC DPC	DIFC Data Protection Commissioner	difc.ae
Saudi Arabia	SDAIA	Saudi Data & AI Authority (PDPL regulator)	sdaia.gov.sa
UAE (ADGM)	ADGM ODP	ADGM Office of Data Protection	adgm.com
UAE	UAE Data Office	UAE Data Office	uaedataoffice.ae

Americas regulators
Country	Short	Authority	Official site
Argentina	AAIP	Agencia de Acceso a la Información Pública	argentina.gob.ar/aaip
Brazil	ANPD	Autoridade Nacional de Proteção de Dados	gov.br/anpd
Canada	OPC	Office of the Privacy Commissioner of Canada	priv.gc.ca
Colombia	SIC	Superintendencia de Industria y Comercio	sic.gov.co
Mexico	INAI	Instituto Nacional de Transparencia, Acceso a la Información y Protección de Datos	home.inai.org.mx
Peru	ANPD	Autoridad Nacional de Protección de Datos Personales	gob.pe/anpd
United States *	FTC	Federal Trade Commission (privacy/enforcement)	ftc.gov
Uruguay	URCDP	Unidad Reguladora y de Control de Datos Personales	gub.uy

* United States: privacy enforcement is split across multiple regulators (FTC, state Attorneys General, sector regulators). There is no single national DPA equivalent.

Asia-Pacific regulators
Country	Short	Authority	Official site
Australia	OAIC	Office of the Australian Information Commissioner	oaic.gov.au
China	CAC	Cyberspace Administration of China	cac.gov.cn
Hong Kong (SAR)	PCPD	Privacy Commissioner for Personal Data	pcpd.org.hk
India	DPB	Data Protection Board of India	meity.gov.in
Japan	PPC	Personal Information Protection Commission	ppc.go.jp
New Zealand	OPC	Office of the Privacy Commissioner	privacy.org.nz
Singapore	PDPC	Personal Data Protection Commission	pdpc.gov.sg
South Korea	PIPC	Personal Information Protection Commission	pipc.go.kr

Spotted an authority we've missed or a link that's changed? Tell us — we keep this directory current.