Rights Compass

All rights

General Data Protection Regulation (EU) 2016/679

CELEX 32016R0679 ↗Designation deadline: 25.5.2018

Designations change as member states legislate. Last reviewed: 19.7.2026. Always confirm against the official list.

This Regulation applies directly and uniformly in all member states, so there is no national transposition to compare. What does vary is which national body enforces it — and whether the state has designated one at all.

Bulgaria

✕
Designated

Supervisory authority designated under GDPR Art. 51. This is the body you lodge an Art. 77 complaint with if you live or work in this country.

National authority
Commission for Personal Data Protection (CPDP)
Deadline
25.5.2018
Data as of
19.7.2026
Source
Official list ↗

Not yet human-verified

CountryStatusNational authorityDeadlineData as ofSource
AustriaDesignatedÖsterreichische Datenschutzbehörde (DSB)25.5.201819.7.2026Official list ↗
BelgiumDesignatedAutorité de la protection des données / Gegevensbeschermingsautoriteit (APD-GBA)25.5.201819.7.2026Official list ↗
BulgariaDesignatedCommission for Personal Data Protection (CPDP)25.5.201819.7.2026Official list ↗
CroatiaDesignatedAgencija za zaštitu osobnih podataka (AZOP)25.5.201819.7.2026Official list ↗
CyprusDesignatedΓραφείο Επιτρόπου Προστασίας Δεδομένων Προσωπικού Χαρακτήρα25.5.201819.7.2026Official list ↗
CzechiaDesignatedÚřad pro ochranu osobních údajů (Office for Personal Data Protection)25.5.201819.7.2026Official list ↗
DenmarkDesignatedDatatilsynet25.5.201819.7.2026Official list ↗
EstoniaDesignatedAndmekaitse Inspektsioon (Estonian Data Protection Inspectorate)25.5.201819.7.2026Official list ↗
FinlandDesignatedTietosuojavaltuutetun toimisto (Office of the Data Protection Ombudsman)25.5.201819.7.2026Official list ↗
FranceDesignatedCommission Nationale de l'Informatique et des Libertés (CNIL)25.5.201819.7.2026Official list ↗
GermanyDesignatedDie Bundesbeauftragte für den Datenschutz und die Informationsfreiheit (BfDI) — federal level; each Land has its own authority for the private sector25.5.201819.7.2026Official list ↗
GreeceDesignatedΑρχή Προστασίας Δεδομένων Προσωπικού Χαρακτήρα (HDPA)25.5.201819.7.2026Official list ↗
HungaryDesignatedNemzeti Adatvédelmi és Információszabadság Hatóság (NAIH)25.5.201819.7.2026Official list ↗
IrelandDesignatedData Protection Commission (DPC)25.5.201819.7.2026Official list ↗
ItalyDesignatedGarante per la protezione dei dati personali25.5.201819.7.2026Official list ↗
LatviaDesignatedDatu valsts inspekcija (Data State Inspectorate)25.5.201819.7.2026Official list ↗
LithuaniaDesignatedValstybinė duomenų apsaugos inspekcija (State Data Protection Inspectorate)25.5.201819.7.2026Official list ↗
LuxembourgDesignatedCommission Nationale pour la Protection des Données (CNPD)25.5.201819.7.2026Official list ↗
MaltaDesignatedOffice of the Information and Data Protection Commissioner (IDPC)25.5.201819.7.2026Official list ↗
NetherlandsDesignatedAutoriteit Persoonsgegevens (AP)25.5.201819.7.2026Official list ↗
PolandDesignatedUrząd Ochrony Danych Osobowych (UODO)25.5.201819.7.2026Official list ↗
PortugalDesignatedComissão Nacional de Proteção de Dados (CNPD)25.5.201819.7.2026Official list ↗
RomaniaDesignatedAutoritatea Naţională de Supraveghere a Prelucrării Datelor cu Caracter Personal (ANSPDCP)25.5.201819.7.2026Official list ↗
SlovakiaDesignatedÚrad na ochranu osobných údajov Slovenskej republiky25.5.201819.7.2026Official list ↗
SloveniaDesignatedInformacijski pooblaščenec (Information Commissioner)25.5.201819.7.2026Official list ↗
SpainDesignatedAgencia Española de Protección de Datos (AEPD)25.5.201819.7.2026Official list ↗
SwedenDesignatedIntegritetsskyddsmyndigheten (IMY)25.5.201819.7.2026Official list ↗