GDPR supervisory authority per country

Each EU country has its own authority that supervises the GDPR and handles complaints. The table lists all of them, with the official website.

CountryAuthority
AustriaDatenschutzbehörde
BelgiumBelgian Data Protection Authority
BulgariaCommission for Personal Data Protection
CroatiaAZOP
CyprusCommissioner for Personal Data Protection
CzechiaÚřad pro ochranu osobních údajů
DenmarkDatatilsynet
EstoniaAndmekaitse Inspektsioon
FinlandTietosuojavaltuutetun toimisto
FranceCNIL
GermanyBfDI
GreeceHellenic Data Protection Authority
HungaryNAIH
IrelandData Protection Commission
ItalyItalian Data Protection Authority
LatviaDatu valsts inspekcija
LithuaniaState Data Protection Inspectorate
LuxembourgCNPD
MaltaInformation and Data Protection Commissioner
NetherlandsAutoriteit Persoonsgegevens
PolandUODO
PortugalCNPD
RomaniaNational Supervisory Authority for Personal Data Processing
SlovakiaOffice for Personal Data Protection of the Slovak Republic
SloveniaInformacijski pooblaščenec
SpainAEPD
SwedenIMY
NorwayDatatilsynet

Source: EDPB member list and Regulation (EU) 2016/679. Reviewed 2026-10-12.

ExploreWorldAI is operated by Valkiv Ventures AB (Reg. no. 556995-1311), Kungsgatan 8, 111 43 Stockholm, Sweden. EU-hosted, with data processing assessed against the GDPR. Contact: hello@exploreworldai.com.

Machine-readable summaries for AI agents: /llms.txt and /llms-full.txt.