Rights Compass

All rights

General Data Protection Regulation (EU) 2016/679

CELEX 32016R0679 ↗Designation deadline: 25 May 2018

Designations change as member states legislate. Last reviewed: 19 Jul 2026. Always confirm against the official list.

This Regulation applies directly and uniformly in all member states, so there is no national transposition to compare. What does vary is which national body enforces it — and whether the state has designated one at all.

MapTable
All · 27Designated · 27Pending final adoption · 0Not designated (deadline passed) · 0Not designated · 0Unknown / not yet tracked · 0
CountryStatusNational authorityDeadlineData as ofSource
SwedenDesignatedIntegritetsskyddsmyndigheten (IMY)25 May 201819 Jul 2026Official list ↗
SpainDesignatedAgencia Española de Protección de Datos (AEPD)25 May 201819 Jul 2026Official list ↗
SloveniaDesignatedInformacijski pooblaščenec (Information Commissioner)25 May 201819 Jul 2026Official list ↗
SlovakiaDesignatedÚrad na ochranu osobných údajov Slovenskej republiky25 May 201819 Jul 2026Official list ↗
RomaniaDesignatedAutoritatea Naţională de Supraveghere a Prelucrării Datelor cu Caracter Personal (ANSPDCP)25 May 201819 Jul 2026Official list ↗
PortugalDesignatedComissão Nacional de Proteção de Dados (CNPD)25 May 201819 Jul 2026Official list ↗
PolandDesignatedUrząd Ochrony Danych Osobowych (UODO)25 May 201819 Jul 2026Official list ↗
NetherlandsDesignatedAutoriteit Persoonsgegevens (AP)25 May 201819 Jul 2026Official list ↗
MaltaDesignatedOffice of the Information and Data Protection Commissioner (IDPC)25 May 201819 Jul 2026Official list ↗
LuxembourgDesignatedCommission Nationale pour la Protection des Données (CNPD)25 May 201819 Jul 2026Official list ↗
LithuaniaDesignatedValstybinė duomenų apsaugos inspekcija (State Data Protection Inspectorate)25 May 201819 Jul 2026Official list ↗
LatviaDesignatedDatu valsts inspekcija (Data State Inspectorate)25 May 201819 Jul 2026Official list ↗
ItalyDesignatedGarante per la protezione dei dati personali25 May 201819 Jul 2026Official list ↗
IrelandDesignatedData Protection Commission (DPC)25 May 201819 Jul 2026Official list ↗
HungaryDesignatedNemzeti Adatvédelmi és Információszabadság Hatóság (NAIH)25 May 201819 Jul 2026Official list ↗
GreeceDesignatedΑρχή Προστασίας Δεδομένων Προσωπικού Χαρακτήρα (HDPA)25 May 201819 Jul 2026Official list ↗
GermanyDesignatedDie Bundesbeauftragte für den Datenschutz und die Informationsfreiheit (BfDI) — federal level; each Land has its own authority for the private sector25 May 201819 Jul 2026Official list ↗
FranceDesignatedCommission Nationale de l'Informatique et des Libertés (CNIL)25 May 201819 Jul 2026Official list ↗
FinlandDesignatedTietosuojavaltuutetun toimisto (Office of the Data Protection Ombudsman)25 May 201819 Jul 2026Official list ↗
EstoniaDesignatedAndmekaitse Inspektsioon (Estonian Data Protection Inspectorate)25 May 201819 Jul 2026Official list ↗
DenmarkDesignatedDatatilsynet25 May 201819 Jul 2026Official list ↗
CzechiaDesignatedÚřad pro ochranu osobních údajů (Office for Personal Data Protection)25 May 201819 Jul 2026Official list ↗
CyprusDesignatedΓραφείο Επιτρόπου Προστασίας Δεδομένων Προσωπικού Χαρακτήρα25 May 201819 Jul 2026Official list ↗
CroatiaDesignatedAgencija za zaštitu osobnih podataka (AZOP)25 May 201819 Jul 2026Official list ↗
BulgariaDesignatedCommission for Personal Data Protection (CPDP)25 May 201819 Jul 2026Official list ↗
BelgiumDesignatedAutorité de la protection des données / Gegevensbeschermingsautoriteit (APD-GBA)25 May 201819 Jul 2026Official list ↗
AustriaDesignatedÖsterreichische Datenschutzbehörde (DSB)25 May 201819 Jul 2026Official list ↗