HomeKnowledge HubRegulators & Authorities › Agencia Española de Protección de Datos

Data protection authority

Agencia Española de Protección de Datos

AEPD Spain

Spanish national data protection authority; highest GDPR fine count in the EU.

Jurisdiction (head office)
Spain
Scope covered
Spain
Type
Data protection authority
GRC discipline
Data protection & privacy
Statutory / official basis
GDPR; Organic Law 3/2018 (LOPDGDD)
Status
Current — verified June 2026

Regional authorities also exist for Catalonia (APDCAT) and the Basque Country (AVPD) public sectors.

This is a curated reference entry maintained by VulaPri, verified against official sources. Spotted something out of date? Tell us →