National data protection authority

There are across the world several National data protection authorities, which are authorities tasked with information privacy. In the European Union and the EFTA member countries their status was formalized by the Data Protection Directive^[1] and they were involved in the Madrid Resolution.

This project is a part of the work of the International Law Commission of the United Nations.

Authorities by group of states

On the European level, it is the G29 and the European Data Protection Supervisor (EDPS). The process was backed in 2005 by the Council of Europe, during the World Summit on the Information Society (Tunis, November 2005), and in 2006/2007 within forums on Internet governance (Athens 2006, Rio 2007).
On 12 June 2007, OECD recommendation regarding "trans-frontier cooperation for legislations protecting privacy enforcement" was adopted. It aimed in particular to "improve national Privacy law enforcements so that national authorities can better cooperate with foreign authorities and put in place efficient international mechanisms to ease trans-frontier cooperation for legislations protecting privacy enforcement".
An Ibero-American network of data protection exists. In May 2008, during its 6th meeting, in Colombia, its declaration asking international conferences on data protection and privacy to "pursue their efforts, regardless of their geographical location, in order to adopt common legal instruments".
Another network is that of the Central and Eastern data protection authority (CEDPA). This network has expressed its will to pursue and strengthen its activities within the CEDPA, notably to elaborate common solutions and assist new members with the establishment of data protection legislation. That was during the June 2008 meeting in Poland.

List of national data protection authorities

European Economic Area

Austria: Austrian Data Protection Authority (Template:Lang-de)
Belgium: Belgian Data Protection Authority (Template:Lang-nl, Template:Lang-fr, Template:Lang-de), also known as APD-GBA
Bulgaria: Bulgarian Data Protection Authority (Template:Lang-bg)
Cyprus: Office of the Commissioner for Personal Data Protection (Template:Lang-el)
Czech Republic: Office for Personal Data Protection (Template:Lang-cs)
Denmark: Danish Data Protection Agency (Template:Lang-da)
Estonia: Estonian Data Protection Inspectorate (Template:Lang-et)
Finland: Office of the Data Protection Ombudsman (Template:Lang-fi)
France: Commission nationale de l'informatique et des libertés (lit. 'National Commission on Informatics and Liberty'), also known as CNIL
Germany: Federal Commissioner for Data Protection and Freedom of Information (Template:Lang-de)
- Note: Competent supervisory authorities for the enforcement of data protection in the private sector are the respective state authorities.^[2]
Greece: Hellenic Data Protection Authority (Template:Lang-el), also known as HDPA
Hungary: Hungarian National Authority for Data Protection and Freedom of Information (Template:Lang-hu)
Iceland: Data Protection Authority (Template:Lang-is)
Ireland: Data Protection Commissioner (Template:Lang-ga), also known as DPC
Italy: Italian Data Protection Authority (Template:Lang-it), also known as Italian DPA
Latvia: Data State Inspectorate (Template:Lang-lv, Template:Lang-ru)
Liechtenstein: Datenschutzstelle
Lithuania: State Data Protection Inspectorate (Template:Lang-lt)
Luxembourg: National Commission for Data Protection (Template:Lang-de, Template:Lang-fr), also known as CNPD
Malta: Office of the Information and Data Protection Commissioner, also known as IDPC
Netherlands: Dutch Data Protection Authority (Template:Lang-nl)
Norway: Norwegian Data Protection Authority (Template:Lang-no)
Poland: Polish Data Protection Commissioner (Template:Lang-pl)
Portugal: National Commission Data Protection (Template:Lang-pt), also known as NCDP
Romania: National Authority for the Supervision of Personal Data Processing (Template:Lang-ro), also known as ANSPDCP
Slovakia: Office for Personal Data Protection of the Slovak Republic (Template:Lang-sk)
Slovenia: Information Commissioner of the Republic of Slovenia (Template:Lang-sl)
Spain: Spanish Data Protection Agency (Template:Lang-es)
- Andalusia: Transparency and Data Protection Council of Andalusia (Template:Lang-es)
- Basque Country: Basque Data Protection Authority (Template:Lang-eu, Template:Lang-es)
- Catalonia: Catalan Data Protection Authority (Template:Lang-ca)
Sweden: Swedish Data Protection Authority (Template:Lang-sv), also known as Swedish DPA
United Kingdom: Information Commissioner's Office, also known as ICO

Europe

Albania: Information and Data Protection Commissioner (IDP) (Komisionerit për të Drejtën e Informimit dhe Mbrojtjen e të Dhënave Personale (KDIMDP))
Andorra: Data Protection Agency of Andorra (Template:Lang-ca)
Croatia: Croatian Personal Data Protection Agency (Template:Lang-hr)
Guernsey: Data Protection Office
North Macedonia: Directorate for Personal Data Protection (Template:Lang-mk)
Isle of Man: Office of the Data Protection Supervisor
Monaco: Commission de contrôle des informations nominatives (lit. 'Personal Data Control Board'), also known as CCIN
Russia: Federal Service for Supervision in the Sphere of Telecom, Information Technologies and Mass Communications (Roskomnadzor)
Serbia: Commissioner for Information of Public Importance and Personal Data Protection (Template:Lang-sr)
Switzerland: Federal Data Protection and Information Commissioner (Template:Lang-de, Template:Lang-fr, Template:Lang-it), also known as FDPIC
Turkey: Turkish Data Protection Authority (Template:Lang-tr)
Ukraine: Ukrainian Parliament Commissioner for Human Rights (Template:Lang-uk)

Africa

Angola: Data Protection Agency (Template:Lang-pt), known as APD
Egypt: No national authority is responsible for data protection.
Ghana: Data Protection Commission
Morocco: Commission nationale de contrôle de la protection des données à caractère personnel (lit. 'National Commission for the Control of the Protection of Personal Data'), also known as CNDP
Mozambique: No national authority is responsible for data protection.
Nigeria: National Information Technology Development Agency (NITDA) and Nigerian Communications Commission (NCC) provide services regarding data protection.
South Africa: Information Regulator^[3]
Tunisia: National Authority for Protection of Personal Data (Template:Lang-fr), known as INPDP
Zimbabwe: There is currently no data protection authority but the Zimbabwe Media Commission comments on the degree of protection of privacy from public bodies programs.

Asia

China: Cyberspace Administration of China (CAC)
Hong Kong: Office of the Privacy Commissioner for Personal Data (PCPD)
India: No national authority is responsible for data protection.
Indonesia: No national authority is responsible for data protection.
Israel: The Privacy Protection Authority (Template:Lang-he)
Japan: Personal Information Protection Commission
Kazakhstan: Data protection is regulated by the state.
Macau: Office for Personal Data Protection, known as OPDP
Malaysia: There is a Personal Data Protection Commissioner
Pakistan: No national authority is responsible for data protection.
Philippines: National Privacy Commission
Qatar: Qatar Ministry of Transport and Communications
Saudi Arabia: No national authority is responsible for data protection.
Singapore: A Personal Data Protection Commission is created following the Personal Data Protection Act 2012 (Singapore)
South Korea: Korea Communications Commission
Taiwan: No national authority is responsible for data protection.
Thailand: Office of the Personal Data Protection Committee
Turkmenistan: No national authority is responsible for data protection.
Uzbekistan: Regulators for data protection are sector-specific.

Oceania

North America

Canada: Office of the Privacy Commissioner of Canada (Template:Lang-fr)
Mexico: National Institute of Transparency for Access to Information and Personal Data Protection (Template:Lang-es)
USA: There is no single national authority.

South America

Argentina: Dirección Nacional de Protección de Datos Personales (lit. 'National Direction for Private Data Protection'), known as PDP
Bolivia: No national authority is responsible for data protection.
Brazil: National Data Protection Authority (ANPD)^[4]
Chile: There is no dedicated authority.
Colombia: Superintendency of Industry and Commerce (SIC)
Costa Rica: Agency for the Protection of Individual's Data (Template:Lang-es), known as PRODHAB
Dominican Republic: No national authority is responsible for data protection.
Honduras: National Civil Registry (Template:Lang-es)^[5] and Institute for the Access to Public Information (Template:Lang-es)^[6]
Panama: No national authority is responsible for data protection.
Peru: Ministerio de Justicia y Derechos Humanos (Perú) (lit. 'Ministry of Justice and Human Rights')
Venezuela: No national authority is responsible for data protection.

References

^ Article 28 of EU directive 95/46/EC
^ "Datenschutzaufsichtsbehörden für den nicht-öffentlichen Bereich". www.ldi.nrw.de. Retrieved Oct 15, 2020.
^ https://www.justice.gov.za/inforeg/
^ "Brazil's Temer creates data protection agency - official gazette". Reuters. 2018-12-28. Retrieved 2018-12-28.
^ http://www.rnp.hn
^ http://www.iaip.gob.hn

External links

[1] Article 28 of EU directive 95/46/EC

[2] "Datenschutzaufsichtsbehörden für den nicht-öffentlichen Bereich". www.ldi.nrw.de. Retrieved Oct 15, 2020.

[3] ttps://www.justice.gov.za/inforeg/

[4] "Brazil's Temer creates data protection agency - official gazette". Reuters. 2018-12-28. Retrieved 2018-12-28.

[5] ttp://www.rnp.hn

[6] ttp://www.iaip.gob.hn

[1]

[2]

[3]

[4]

[5]

[6]

v t e Privacy
Principles	Right of access to personal data Expectation of privacy Right to privacy Right to be forgotten Post-mortem privacy
Privacy laws	Australia Brazil Canada China Denmark England European Union Germany Ghana New Zealand Russia Singapore Sri Lanka Switzerland United Kingdom United States California, amended in 2020
Data protection authorities	Australia Denmark European Union France Germany India Indonesia Ireland Isle of Man Netherlands Norway Philippines Poland South Korea Spain Sweden Switzerland Thailand Turkey United Kingdom
Areas	Consumer Digital Education Medical Workplace
Information privacy	Law Financial Internet Facebook Google Twitter Email Personal data Personal identifier Social networking services Privacy-enhancing technologies Privacy engineering Privacy-invasive software Privacy policy Privacy software Secret ballot Virtual assistant privacy
Advocacy organizations	American Civil Liberties Union Center for Democracy and Technology Computer Professionals for Social Responsibility Data Privacy Lab Electronic Frontier Foundation Electronic Privacy Information Center European Digital Rights Future of Privacy Forum Global Network Initiative International Association of Privacy Professionals NOYB Privacy International
See also	Anonymity Cellphone surveillance Data security Eavesdropping Global surveillance Identity theft Mass surveillance Panopticon PRISM Search warrant Wiretapping Human rights Personality rights
Category