Links

By Country

Data Protection/Privacy Authorities, Government Regulatory Bodies and Privacy Associations & Advocates

Countries A, B

Afghanistan

National DPA

• None

Data Protection Law

• None

 

Albania

National DPA

• Information and Data Protection Commissioner

Data Protection Law

• On Personal Data Protection (Law No. 124-2024)

 

Algeria

National DPA

• Autorité Nationale de Protection des Données à Caractère Personnel

Data Protection Law

• Law No. 18-07

Andorra

National DPA

• Andorran data protection authority (APDA)

Data Protection Law

• On the protection of personal data (Law 29/2021)

 

Angola

National DPA

• Data Protection Agency

Data Protection Law

• Personal Data Protection Law

Anguilla

National DPA

• None

Data Protection Law

• None

 

Antigua and Barbuda

National DPA

• Information Commissioner

Data Protection Law

• Data Protection Act 2013

 

Argentina

National DPA

• National Directorate for Personal Data Protection

Data Protection Law

• Personal Data Protection Law

Associations / Advocates

• Proteccion de Datos Personales - Information and legal advice on data protection in Argentina

Armenia

National DPA

• Personal Data Protection Agency

Data Protection Law

• The Personal Data Law

Aruba

National DPA

• None

Data Protection Law

• None

 

Australia

National DPA

• Office of the Australian Information Commissioner (OAIC)

State DPAs

• New South Wales - Information and Privacy Commission NSW (IPC) 
• Northern Territory - Office of the Information Commissioner
• Queensland - Office of the Information Commissioner
• Sosuth Australia - Privacy Committee of South Australia
• Victoria - Office of the Victorian Information Commissioner

Data Protection Law

• The Privacy Act 1988

Associations / Advocates

• Australian Privacy Foundation - Since 1987 the only privacy-specific NGO/advocacy group in Australia

Austria

National DPA

• Datenschutzbehörde - Austrian Data Protection Authority

Data Protection Law

• Datenschutzgeset - Data Protection Act 

Associations / Advocates

• Arge Daten Privacy Service - Austrian Privacy advocates

Azerbaijan

National DPA

• Ministry of Digital Development and Transport

Data Protection Law

• On Personal Data No. 998-IIIQ of May 11, 2010

 

Bahamas

National DPA

• Office of the Data Protection Commissioner

Data Protection Law

• Privacy of Personal Information Act

 

Bahrain

National DPA

• Personal Data Protection Authority

Data Protection Law

• Personal Data Protection Law (No. 30 of 2018)

 

Bangladesh

National DPA

• None

Data Protection Law

• None

 

Barbados

National DPA

• Data Protection Commission

Data Protection Law

• Data Protection Bill 2019

 

Belarus

National DPA

• National Personal Data Protection Center

Data Protection Law

• On Personal Data Protection May 7, 2021 № 99-Z

 

Belgium

National DPA

• Data Protection Authority

Data Protection Law

• Act on the protection of natural persons with regard to the
  processing of personal data

Belize

National DPA

• None

Data Protection Law

• Data Protection Act 2021

 

Benin

National DPA

• APDP

Data Protection Law

• Law No. 2009-09
• Law No. 2020-35

 

Bhutan

National DPA

• None

Data Protection Law

• None

 

Bolivia

National DPA

• None

Data Protection Law

• None

 

Bosnia and Herzegovina

National DPA

• Personal Data Protection Agency

Data Protection Law

• Law on Protection of Personal Data

Botswana

National DPA

• Information and Data Protection Commission

Data Protection Law

• Data Protection Act

 

Brazil

National DPA

• National Data Protection Authority (ANPD)

Data Protection Law

• General Personal Data Protection Act (LGPD)

British Virgin Islands

National DPA

• Office of the Information Commissioner

Data Protection Law

• Data Protection Act

 

Brunei

National DPA

• None

Data Protection Law

• None

 

Bulgaria

National DPA

• Commission for Personal Data Protection

Data Protection Law

• Personal Data Protection Act

Burkina Faso

National DPA

• Commission de l'Informatique et des Libertes

Data Protection Law

• Law No. 001/2021

Burundi

National DPA

• None

Data Protection Law

• None

 

 

Countries C, D, E, F

Cabo Verde (Cape Verde)

National DPA

• Comissão Nacional de Proteção de Dados Pessoais

Data Protection Law

• Data Protection Act

 

Cambodia

National DPA

• None

Data Protection Law

• None

 

Cameroon

National DPA

• Personal Data Protection Authority (PDPA)

Data Protection Law

• Law No. 2024/017 Relating to Personal Data Protection in Cameroon

 

Canada

National DPA

• Office of the Privacy Commissioner of Canada (OPC)

Provincial DPAs

• Alberta - Office of the Information & Privacy Commissioner
• British Columbia - Office of the Information & Privacy Commissioner
• Manitoba - Ombudsman Manitoba
• New Brunswick - Office of the Ombud
• Newfoundland and Labrador - Office of the Information & Privacy Commissioner
• Northwest Territories - Office of the Information and Privacy Commissioner
• Nova Scotia - Office of the Information and Privacy Commissioner
• Nunavut - Office of the Information and Privacy Commissioner
• Ontario - Information and Privacy Commissioner of Ontario
• Prince Edward Island - Office of the Information and Privacy Commissioner
• Quebec - Commission d’Accès à l’Information de Québec
• Saskatchewan - Office of the Information & Privacy Commissioner
• Yukon - Yukon Information and Privacy Commissioner​

Data Protection Law

• Personal Information Protection and Electronic Documents Act (PIPEDA)

 

Cayman Islands

National DPA

• Ombusdman Cayman Islands

Data Protection Law

• Data Protection Act

 

Central African Republic

National DPA

• Haute Autorité de Protection des Données à caractère Personnel (HAPDP)

Data Protection Law

• Law No. 24.001 on the Protection of Personal Data

 

Chad

National DPA

• Agence Nationale de Sécurité Informatique et de Certification Electronique (ANSICE)

Data Protection Law

• Law No. 007/PR/2015 on the Protection of Personal Data

 

Chile

National DPA

• Consejo para la Transparencia

Data Protection Law

• Data Protection Law, Law No. 21,719

China

National DPA

• Cyberspace Administration of China

Data Protection Law

• Personal Information Protection Law

 

Cocos (Keeling) Islands

National DPA

• Office of the Australian Information Commissioner (OAIC)

Data Protection Law

• The Privacy Act 1988

 

Colombia

National DPA

• Superintendent of Industry and Commerce

Data Protection Law

• Law 1581 of 2012

 

Comoros

National DPA

• National Commission for the Protection of Personal Data (CNPD)

Data Protection Law

• Protection of Personal Data

 

Congo (Congo-Brazzaville)

National DPA

• None

Data Protection Law

• Law 29 of 2019

 

Cook Islands

National DPA

• None

Data Protection Law

• None

 

Costa Rica

National DPA

• Agencia de Protección de Datos de los Habitantes (PROHAB)

Data Protection Law

• Law No 7975 on Undisclosed Information
• Law No 8986, Protection in the Handling of the Personal Data of Individuals

 

Croatia

National DPA

• Personal Data Protection Agency (AZOP)

Data Protection Law

• Act on the Implementation of the General Data Protection Regulation

 

Cuba

National DPA

• Ministry of Communications

Data Protection Law

• None

 

Curaçao

National DPA

• None

Data Protection Law

• Landsverordening bescherming persoonsgegevens, National Gazette 2010

 

Cyprus

National DPA

• Commissioner for the Protection of Personal Data

Data Protection Law

• Protection of Physical Persons Against the Processing of Personal Data and Free Movement of such Data Law 125(I)/2018

Czechia (Czech Republic)

National DPA

• Office for Personal Data Protection (UOOU)

Data Protection Law

• Act No. 110/2019 Coll., on Personal Data Processing

 

Côte d’Ivoire

National DPA

• Autorité de Régulation des Télécommunications/TIC de Côte d'Ivoire (ARTCI)

Data Protection Law

• Law no. 2013-450 of 19 June 2013 on the protection of personal data

 

Democratic Republic of the Congo

National DPA

• Autorité de Régulation des Postes, Télécommunications et Technologies de l’Information et de la Communication (ARPTIC)

Data Protection Law

• N°23-010 of 13 March 2023

 

Denmark

National DPA

• Datatilsynet

Data Protection Law

• Act on Data Protection

 

Djibouti

National DPA

• None

Data Protection Law

• Digital Code

 

Dominica

National DPA

• None

Data Protection Law

• None

 

Dominican Republic

National DPA

• None

Data Protection Law

• Law No. 172-13 on the Protection of Personal Data

 

East Timor (Timor-Leste)

National DPA

• None

Data Protection Law

• None

 

Ecuador

National DPA

• Superintendence of Data Protection

Data Protection Law

• Personal Data Protection Organic Law

 

Egypt

National DPA

• Ministry of Communications and Information Technology

Data Protection Law

• Personal Data Protection Law No.151

 

El Salvador

National DPA

• None

Data Protection Law

• None

 

Equatorial Guinea

National DPA

• None

Data Protection Law

• Law No. 1/2016 on the Protection of Personal Data

 

Eritrea

National DPA

• None

Data Protection Law

• None

 

Estonia

National DPA

• Data Protection Inspectorate

Data Protection Law

• Personal Data Protection Act (PDPA)

Eswatini (fmr. ""Swaziland"")

National DPA

• Eswatini Data Protection Authority (EDPA)

Data Protection Law

• Data Protection Act

 

Ethiopia

National DPA

• Ethopian Communications Authority (ECA)

Data Protection Law

• Personal Data Protection Proclamation No. 1321/2024

 

Falkland Islands

National DPA

• Information Commissioner's Office

Data Protection Law

• None; there is a Data Protection Policy

 

Faroe Islands

National DPA

• The Data Protection Authority

Data Protection Law

• Data Protection Act

 

Fiji

National DPA

• None

Data Protection Law

• Constitution of Fiji (Clause 24)

 

Finland

National DPA

• Data Protection Ombudsman

Data Protection Law

• Data Protection Act

 

France

National DPA

• National Commission for Freedom of Information (CNIL)

Data Protection Law

• French Data Protection Act 1978

French Guiana

National DPA

• National Commission for Freedom of Information (CNIL)

Data Protection Law

• French Data Protection Act 1978

 

French Polynesia

National DPA

• National Commission for Freedom of Information (CNIL)

Data Protection Law

• French Data Protection Act 1978

 

Countries G, H, I

Gabon

National DPA

• Authority for the Protection of Personal Data and Privacy (APDPVP)

Data Protection Law

• Law No. 025/2023 of 09/07/2023 amending Law No. 001/2011 of September 25, 2011, on the protection of personal data

 

Gambia

National DPA

• None

Data Protection Law

• None

 

Georgia

National DPA

• Personal Data Protection Service

Data Protection Law

• Personal Data Protection

 

Germany

National DPA

• Federal Commissioner for Data Protection and Freedom of Information (BfDI)

Lant DPAs

• Baden-Wuerttenberg - State Commissioner for Data Protection and Freedom of Information Baden-Württemberg (LfDI)
• Bavaria (Private sector) - Bavarian State Office for Data Protection Supervision (BayLDA)
• Bavaria (Public sector) - Bavarian Data Protection Commissioner (Bavarian DPC)
• Berlin - Berlin Commissioner for Data Protection and Freedom of Information
• Brandenburg - The State Commissioner for Data Protection and the Right to Access Files Brandenburg
• Bremen - The State Commissioner for Data Protection and Freedom of Information
• Hamburg - Hamburg Commissioner for Data Protection and Freedom of Information
• Hesse - Hessian Commissioner for Data Protection and Freedom of Information
• Lower Saxony - The State Commissioner for Data Protection of Lower Saxony
• Mecklenburg-Western Pomerania - The State Commissioner for Data Protection and Freedom of Information Mecklenburg-Vorpommern
• North Rhine-Westphalia - State Commissioner for Data Protection and Freedom of Information (LDI NRW)
• Rhineland-Palatinate - State Commissioner for Data Protection and Freedom of Information 
• Saarland - State Commissioner for Data Protection and Freedom of Information
• Saxony - Saxon Data Protection Officer
• Saxony-Anhalt - State Commissioner for Data Protection Saxony-Anhalt
• Schleswig-Holstein - Independent State Centre for Data Protection (ULD)
• Thuringia - Thuringian State Commissioner for Data Protection and Freedom of Information (TLfDI)

Data Protection Law

• German Federal Data Protection Act (BDSG)

 

Ghana

National DPA

• Data Protection Commission

Data Protection Law

• Data Protection Act, 2012 (Act 843)

 

Gibraltar

National DPA

• Gibraltar Regulatory Authority (GRA)

Data Protection Law

• Gibraltar GDPR

 

Greece

National DPA

• Hellenic Data Protection Authority (HDPA)

Data Protection Law

• Law 4624/2019 “on the Hellenic Data Protection Authority, the implementation of Regulation 2016/679 and the transposition of Directive 2016/680”

 

Greenland

National DPA

• Datatilsynet

Data Protection Law

• Personal Data Protection Act of 2016

 

Grenada

National DPA

• Information Commission

Data Protection Law

• Data Protection Bill, 2023

 

Guadeloupe

National DPA

• National Commission for Freedom of Information (CNIL)

Data Protection Law

• French Data Protection Act 1978

 

Guam

National DPA

• None

Data Protection Law

• None

 

Guatemala

National DPA

• None

Data Protection Law

• None

 

Guernsey

National DPA

• Office of the Data Protection Authority (ODPA)

Data Protection Law

• The Data Protection (Bailiwick of Guernsey) Law, 2017

 

Guinea

National DPA

• None

Data Protection Law

• L/2016/037/AN dated July 28, 2016

 

Guinea-Bissau

National DPA

• None

Data Protection Law

• Law No. 1/91 of March 25, 1991

 

Guyana

National DPA

• None

Data Protection Law

• Data Protection Act No. 18 of 2023

 

Haiti

National DPA

• None

Data Protection Law

• Arrêté fixant les règles relatives à la protection des données à caractère personnel

 

Honduras

National DPA

• None

Data Protection Law

• None

 

Hong Kong

National DPA

• Office of the Privacy Commissioner for Personal Data (PCPD)

Data Protection Law

• Personal Data (Privacy) Ordinance (Cap. 486)
• Personal Data (Privacy) (Amendment) Ordinance

Hungary

National DPA

• Hungarian National Authority for Data Protection and Freedom of Information

Data Protection Law

• Act CXII of 2011 on the Right of Informational Self-Determination and on Freedom of Information

 

Iceland

National DPA

• Persónuvernd

Data Protection Law

• Act No. 90/2018 on Data Protection and the Processing of Personal Data

India

National DPA

• Data Protection Board of India

Data Protection Law

• Digital Personal Data Protection Act, 2023
• Digital Personal Data Protection Rules, 2025

Indonesia

National DPA

• None

Data Protection Law

• Law No. 27 of 2022 concerning Personal Data Protection

 

Iran

National DPA

• None

Data Protection Law

• None

 

Iraq

National DPA

• None

Data Protection Law

• None

 

Ireland

National DPA

• Data Protection Commission

Data Protection Law

• Data Protection Act 2018

Associations / Advocates

• The Association of Data Protection Officers

Isle of Man

National DPA

• Information Commissioner

Data Protection Law

• Data Protection Act 2018

 

Israel

National DPA

• Privacy Protection Authority

Data Protection Law

• Protection of Privacy Law, 5741-1981
• PPL (Amendment No. 13), 5774-2024

 

Italy

National DPA

• Garante per la protezione dei dati personali (Garante)

Data Protection Law

• Legislative Decree 101/2018

Associations/Advocates

• Associazione Data Protection Officer (ASSO DPO)
• Italian Privacy (Privacy issues in Italy)

 

Countries J, K, L

Jamaica

National DPA

• Office of the Information Commissioner

Data Protection Law

• Data Protection Act 2020

 

Japan

National DPA

• Personal Information Protection Commission

Data Protection Law

• Act on the Protection of Personal Information（Act No. 57 of 2003）

 

Jersey

National DPA

• Jersey Office of the Information Commissioner

Data Protection Law

• Data Protection (Jersey) Law, 2018 (DPJL)

 

Jordan

National DPA

• None

Data Protection Law

• Personal Data Protection Law No. (24) of 2023

 

Kazakhstan

National DPA

• Ministry of Artificial Intelligence and Digital Development of the Republic of Kazakhstan

Data Protection Law

• No. 94-V dated May 21, 2013 'On Personal Data and Its Protection'

 

Kenya

National DPA

• Office of the Data Protection Commissioner

Data Protection Law

• Data Protection Act, 2019

 

Kiribati

National DPA

• Ministry of Information, Communications and Transport/Digital Transformation Office

Data Protection Law

• Data Protection Act 2025

 

Kosovo

National DPA

• Information and Privacy Agency (IPA)

Data Protection Law

• Law on Protection of Personal Data No.06/L-082

 

Kuwait

National DPA

• None

Data Protection Law

• None

 

Kyrgyzstan

National DPA

• The State Personal Data Protection Agency

Data Protection Law

• Law of the Kyrgyz Republic on Personal Data No.58

 

Laos

National DPA

• None

Data Protection Law

• None

 

Latvia

National DPA

• Data State Inspectorate

Data Protection Law

• Personal Data Processing Law

 

Lebanon

National DPA

• None

Data Protection Law

• Law No. 81 Relating to Electronic Transactions and Personal Data

 

Lesotho

National DPA

• Data Protection Commission

Data Protection Law

• Data Protection Act

 

Liberia

National DPA

• None

Data Protection Law

• None

 

Libya

National DPA

• None

Data Protection Law

• None

 

Liechtenstein

National DPA

• Data Protection Commissioner

Data Protection Law

• Data Protection Act

 

Lithuania

National DPA

• State Data Protection Inspectorate

Data Protection Law

• Law on Legal Protection of Personal Data

 

Luxembourg

National DPA

• Commission Nationale pour la Protection des Données (CNPD)

Data Protection Law

• Act of 1 August 2018 on the organisation of the National Data Protection Commission

 

Countries M, N

Macau

National DPA

• Personal Data Protection Bureau

Data Protection Law

• Personal Data Protection Law no. 8/2005 of August 22nd

 

Madagascar

National DPA

• Commission Malagasy sur l'Informatique et des Libertés (CMIL)

Data Protection Law

• Law No. 2014-038 relating to protection of personal data

 

Malawi

National DPA

• Data Protection Authority

Data Protection Law

• Data Protection Act No. 3 of 2024

 

Malaysia

National DPA

• Office of the Personal Data Protection Commissioner

Data Protection Law

• Personal Data Protection Act 2010

 

Maldives

National DPA

• None

Data Protection Law

• None

 

Mali

National DPA

• Autorité Malienne de Protection des Données à Caractère Personnel (APDP)

Data Protection Law

• Law No. 2013/015 of 23 May 2013 on the Protection of Personal Data

 

Malta

National DPA

• Information and Data Protection Commissioner

Data Protection Law

• Data Protection Act 2018

 

Marshall Islands

National DPA

• None

Data Protection Law

• None

 

Martinique

National DPA

• CNIL

Data Protection Law

• Law No. 78-17 of 6 January 1978 relating to information technology, data files and civil liberties

 

Mauritania

National DPA

• Personal Data Protection Authority (APDCP)

Data Protection Law

• Law n° 2017 - 020 on Personal Data Protection

 

Mauritius

National DPA

• Data Protection Office

Data Protection Law

• The Data Protection Act 2017

 

Mayotte

National DPA

• National Commission for Freedom of Information (CNIL)

Data Protection Law

• French Data Protection Act 1978

 

Mexico

National DPA

• Ministry of Anti-Corruption and Good Governance

Data Protection Law

• Federal Law for the Protection of Personal Data Held by Private Parties

 

Micronesia

National DPA

• None

Data Protection Law

• None

 

Moldova

National DPA

• National Centre for Personal Data Protection

Data Protection Law

• Law No 195 on Personal Data Protection

 

Monaco

National DPA

• Personal Data Protection Authority (APDP)

Data Protection Law

• Law no. 1.565 of 3 December 2024 on personal data protection

 

Mongolia

National DPA

• National Human Rights Commission

Data Protection Law

• Law of Mongolia on Personal Data Protection

 

Montenegro

National DPA

• Agency for Personal Data Protection and Free Access to Information

Data Protection Law

• Law on Personal Data Protection

 

Montserrat

National DPA

• None

Data Protection Law

• None

 

Morocco

National DPA

• Data Protection National Commission (CNDP)

Data Protection Law

• Law No. 09-08

 

Mozambique

National DPA

• None

Data Protection Law

• None

 

Myanmar

National DPA

• None

Data Protection Law

• None

 

Namibia

National DPA

• None

Data Protection Law

• None

 

Nauru

National DPA

• None

Data Protection Law

• None

 

Nepal

National DPA

• None

Data Protection Law

• The Privacy Act, 2075 (2018)

 

Netherlands

National DPA

• Autoriteit Persoonsgegevens

Data Protection Law

• General Data Protection Regulation Implementation Act

Associations / Advocates

• Dutch National Federation of Data Protection Officers

New Caledonia

National DPA

• National Commission for Freedom of Information (CNIL)

Data Protection Law

• French Data Protection Act 1978

 

New Zealand

National DPA

• Privacy Commissioner's Office

Data Protection Law

• Privacy Act 2020

 

Nicaragua

National DPA

• None

Data Protection Law

• Law No. 787 Personal Data Protection Law

 

Niger

National DPA

• High Authority for the Protection of Personal Data (HAPDP)

Data Protection Law

• Law No. 2022-59

 

Nigeria

National DPA

• Nigeria Data Protection Commission

Data Protection Law

• Data Protection Act 2023

 

Niue

National DPA

• None

Data Protection Law

• None

 

North Korea

National DPA

• None

Data Protection Law

• None

 

North Macedonia

National DPA

• Personal Data Protection Agency

Data Protection Law

• Law on Personal Data Protection

 

Northern Mariana Islands

National DPA

• None

Data Protection Law

• None

 

Norway

National DPA

• Datatilsynet

Data Protection Law

• Norwegian Personal Data Act (LOV-2018-06-15-38)

 

Countries O, P, Q, R

Oman

National DPA

• Ministry of Transport, Communications, and Information Technology

Data Protection Law

• Personal Data Protection Law 2022

 

Pakistan

National DPA

• None

Data Protection Law

• None

 

Palau

National DPA

• None

Data Protection Law

• None

 

Panama

National DPA

• Autoridad Nacional de Transparencia y Acceso a la Información

Data Protection Law

• Ley 81 de Protección de Datos Personales

Papua New Guinea

National DPA

• None

Data Protection Law

• None

 

Paraguay

National DPA

• None

Data Protection Law

• None

 

Peru

National DPA

• Directorate for the Protection of personal data

Data Protection Law

• Personal Data Protection Law No. 29733

 

Philippines

National DPA

• National Privacy Commission

Data Protection Law

• Republic Act 10173 Data Privacy Act of 2012

 

Pitcairn Island

National DPA

• Information Commissioner's Office

Data Protection Law

• Regulation (EU) 2016/679 of the European Parliament and of the Council
• Data Protection Act 2018

 

Poland

National DPA

• Office of the President for Personal Data Protection (UODO)

Data Protection Law

• Personal Data Protection Act of 10 May 2018
• Act on amendments to sectorial acts accompanying the GDPR of 21 February 2019

Associations / Advocates

• Stowarzyszenie Administratorów Bezpieczeństwa Informacji (SABI)

Portugal

National DPA

• Comissão Nacional de Proteção de Dados (CNDP)

Data Protection Law

• Law no 58/2019 of 8 August

 

Puerto Rico

National DPA

• None

Data Protection Law

• None

 

Qatar

National DPA

• National Cyber Governance and Assurance Affairs (NCGAA)

Data Protection Law

• Law No. (13) of 2016 Concerning Personal Data Protection

 

Romania

National DPA

• National Supervisory Authority For Personal Data Processing

Data Protection Law

• Law no. 190/2018

 

Russia

National DPA

• Roskomnadzor

Data Protection Law

• Federal law No. 152 FZ of 27 July 2006, “On Personal Data”

 

Rwanda

National DPA

• National Cyber Security Authority

Data Protection Law

• Law no. 058/2021 of 13/10/2021 relating to the protection of personal data and privacy

 

 

Réunion

National DPA

• National Commission for Freedom of Information (CNIL)

Data Protection Law

• French Data Protection Act 1978

 

Countries S, T

Saint Helena

National DPA

• Information Commissioner's Office

Data Protection Law

• UK GDPR

 

Saint Kitts and Nevis

National DPA

• None

Data Protection Law

• Data Protection Act 2018

 

Saint Lucia

National DPA

• Attorney General's office

Data Protection Law

• Privacy and Data Protection Act 2009
• Data Protection Act 2023

 

Saint Vincent and the Grenadines

National DPA

• None

Data Protection Law

• None

 

Saint-Pierre and Miquelon

National DPA

• National Commission for Freedom of Information (CNIL)

Data Protection Law

• French Data Protection Act 1978

 

 

Samoa

National DPA

• None

Data Protection Law

• None

 

San Marino

National DPA

• Autorità Garante dei Dati Personali

Data Protection Law

• Law No. 171 of 21 December 2018

 

Sao Tome and Principe

National DPA

• Agência Nacional de Protecção de Dados Pessoais (ANPDP)

Data Protection Law

• Law No. 03/2016

 

Saudi Arabia

National DPA

• National Data Management Office

Data Protection Law

• Personal Data Protection Law

 

Senegal

National DPA

• Commission de Données Personnelles (CDP)

Data Protection Law

• Act No. 2008-12 of 25 January 2008 Concerning Personal Data Protection

 

Serbia

National DPA

• Commissioner for Information of Public Importance and Protection of Personal Data

Data Protection Law

• Law no. 87/2018

 

Seychelles

National DPA

• Information Commission

Data Protection Law

• Data Protection Act 2023

 

Sierra Leone

National DPA

• None

Data Protection Law

• None

 

Singapore

National DPA

• Personal Data Protection Commission

Data Protection Law

• Personal Data Protection Act of 2012 (No. 26 of 2012)

 

Sint Maarten

National DPA

• Personal Data Protection Committee

Data Protection Law

• National Ordinance Personal Data Protection

 

Slovakia

National DPA

• Data Protection Office of the Slovak Republic

Data Protection Law

• Act No. 18/2018 Coll. on the protection of personal data and on amending and supplementing certain acts

 

Slovenia

National DPA

• Information Commissioner

Data Protection Law

• Slovenian Data Protection Act (ZVOP-2)

 

Solomon Islands

National DPA

• None

Data Protection Law

• None

 

Somalia

National DPA

• Data Protection Authority

Data Protection Law

• Law no. 005 of 2023 Data Protection Act

 

South Africa

National DPA

• Information Regulator

Data Protection Law

• Protection of Personal Information Act 4 of 2013 (POPIA)

 

South Korea

National DPA

• Personal Information Protection Commission (PIPC)

Data Protection Law

• Personal Information Protection Act (2023)

 

South Sudan

National DPA

• None

Data Protection Law

• None

 

Spain

National DPA

• Agencia Española de Protección de Datos (AEPD)
• Basque - Agencia Vasca de Protecccion de Datos
• Catalonia - Autoritat Catalana de Protecció de Dades

Data Protection Law

• Organic Law 3/2018, of December 5, on Personal Data Protection and guarantee of digital rights

Associations / Advocates

• Asociación Profesional Española de Privacidad (APEP)

Sri Lanka

National DPA

• Data Protection Authority

Data Protection Law

• Personal Data Protection Act (PDPA) No. 9 of 2022

 

Sudan

National DPA

• None

Data Protection Law

• None

 

Suriname

National DPA

• None

Data Protection Law

• None

 

Sweden

National DPA

• Integritetsskyddsmyndigheten (IMY)

Data Protection Law

• Data Protection Act (2018:218)

 

Switzerland

National DPA

• Federal Data Protection and Information Commissioner (EDÖB)

Canton / City DPAs

• Basel-City Canton - Data Protection Agency
• Basel-Country - Data Protection Authority
• Berne Canton - Data Protection Agency
• Berne City - Data Protection Inspectorate
• Fribourg - Data Protection Authority
• Lucerne - Data Protection Authority
• Neuchatel - Le Préposé à la Protection des Données et à la Transparence Jura Neuchâtel (PPDT)
• Solothurn - Data Protection Commissioner
• St. Gallen - Data Protection Commissioner
• Ticino - Independent cantonal data protection
• Valais - Data Protection Commissioner
• Zug - Data Protection Commissioner
• Zurich Canton - Data Protection Commissioner
• Zurich City - Data Protection Office

Data Protection Law

• 235.1 Federal Act of 25 September 2020 on Data Protection (Data Protection Act, FADP)

 

Syria

National DPA

• Personal Data Protection Authority

Data Protection Law

• Law No. 12 (2024)

 

Taiwan

National DPA

• Preparatory Office of the Personal Data Protection Commission (PDPC)

Data Protection Law

• Personal Data Protection Act

 

Tajikistan

National DPA

• Communication Service under the Government of the Republic of Tajikistan

Data Protection Law

• Personal Data Protection Law, No.1537 of 3 August 2018

 

Tanzania

National DPA

• Personal Data Protection Commission (PDPC)

Data Protection Law

• Personal Data Protection Act, 2022

 

Thailand

National DPA

• Personal Data Protection Committee (PDPC)

Data Protection Law

• Personal Data Protection Act, B.E. 2562 (2019)

 

Togo

National DPA

• Personal Data Protection Authority (IPDCP)

Data Protection Law

• Law Relating to the Protection of Personal Data (2019-014)

 

Tokelau

National DPA

• Privacy Commissioner's Office

Data Protection Law

• Privacy Act 2020

 

Tonga

National DPA

• None

Data Protection Law

• Privacy Act 2025

 

Trinidad and Tobago

National DPA

• None

Data Protection Law

• Data Protection Act, 2011

 

Tunisia

National DPA

• National Authority for Protection of Personal Data (INPDP)

Data Protection Law

• Law no. 2004-63 relating to the protection of personal data

 

Turkey

National DPA

• Personal Data Protection Authority

Data Protection Law

• Law on the Protection of Personal Data No. 6698

 

Turkmenistan

National DPA

• None

Data Protection Law

• Law of Turkmenistan No.519-V ‘On Information about Private Life and its Protection’

 

Turks and Caicos Islands

National DPA

• None

Data Protection Law

• None

 

Tuvalu

National DPA

• None

Data Protection Law

• None

 

Countries U, V, W, X, Y, Z

Uganda

National DPA

• Personal Data Protection Office

Data Protection Law

• Data Protection and Privacy Act, 2019

Ukraine

National DPA

• Commissioner for Human Rights (Ombudsman)

Data Protection Law

• Law of Ukraine No. 2297 VI "On Personal Data Protection"

 

United Arab Emirates

National DPA

• UAE Data Office

Data Protection Law

• Federal Decree Law No. 45 of 2021 Regarding the Protection of Personal Data (in Arabic)

 

United Kingdom

National DPA

• UK - Information Commissioner's Office

• Scotland - Scottish Information Commissioner

Data Protection Law

• Data Protection Act 2018, as amended by the UK GDPR
• Data (Use and Access) Act 2025

United States of America

National DPA

• Federal Trade Commission

Data Protection Law

• None at the Federal level

Associations / Advocates

• American Civil Liberties Union (ACLU) - Focuses on the threats to individual privacy caused by the the collection and widespread distribution of personal data

Other

• EU-U.S. Data Privacy Framework
• Department of Homeland Security

United States Virgin Islands

National DPA

• None

Data Protection Law

• None

 

Uruguay

National DPA

• Regulatory Unit and Personal Data Control (URCDP)

Data Protection Law

• Data Protection Act Law No. 18.331 (11 August 2008)

 

Uzbekistan

National DPA

• Personalization Agency

Data Protection Law

• Law of the Republic of Uzbekistan, от 02.07.2019 г. № LRU-547

 

Vanuatu

National DPA

• Deputy Commissioner of Data Protection and Privacy

Data Protection Law

• Data Protection and Privacy Act No. 13 of 2024

 

Vatican City

National DPA

• General Counsel of Vatican City State

Data Protection Law

• General Regulation on the Protection of Personal Data (Decree No. DCLVII) (in Italian)

 

Venezuela

National DPA

• None

Data Protection Law

• None

 

Vietnam

National DPA

• None

Data Protection Law

• Decree No. 13/2023/ND-CP

 

Wallis and Futuna

National DPA

• National Commission for Freedom of Information (CNIL)

Data Protection Law

• French Data Protection Act 1978

 

Yemen

National DPA

• None

Data Protection Law

• None

 

Zambia

National DPA

• Data Protection Commission

Data Protection Law

• The Data Protection Act no 3 of 2021

 

Zimbabwe

National DPA

• Postal and Telecommunications Regulatory Authority of Zimbabwe (POTRAZ)

Data Protection Law

• Cyber and Data Protection Act 2021

 

 

 Back to top

Other Official Bodies, Associations & Advocates

Europe

• Central and Eastern Europe Data Protection Authorities
• Council of Europe
  • Council of Europe - Data Protection Website
    
  • Council of Europe - Data Protection Commissioner
• Court of Justice of the European Union (CJEU)
• European Data Protection Board (EDPB)
• European Data Protection Supervisor (EDPS)
• European Commission
• European Commission - Data Protection
• EU-U.S. Data Privacy Framework

International

• Global Privacy Assembly - formerly: International Conference of Data Protection and Privacy Commissioners
• Electronic Privacy Information Center (EPIC) - Online guide to Privacy resources
• French-speaking Association of Personal Data Protection Authorities (AFAPDP)
• International Association for Human Resource (IHRIM) - Information Management Resource for privacy issues
• Organisation for Economic Co-operation and Development (OECD) - The purpose of the OECD is to develop solutions to common economic and social problems. It has written extensively about privacy issues
• Privacy International - International privacy advocacy and campaigning
• Compliance & Privacy - Portal for specialist security news

Back to top