4.3 KiB
title, description, sidebar
| title | description | sidebar | ||
|---|---|---|---|---|
| Data Protection Authorities | The DPA Directory is a tool to help you find the principal consumer privacy law in your region, the authority mandated to enforce it, and how to report violations. |
|
The Data Protection Authority (DPA) Directory is a tool to help you find the main consumer privacy law in your region, and the authority mandated to enforce the law.
Additionally, this table provides information about each law, authority, contact information for questions, and a link to place a complaint for violation of the law with each authority.
Tip
For more information on how to find a specific privacy law that might not be listed here, and what to look for when reading it, consult the Privacy Activist Toolbox tip to Know Your Privacy Laws.
For more information on how to proceed when reporting a privacy law violation, consult the Privacy Activist Toolbox tip to Report Privacy Violations.
Scope and limitations
-
This directory does not constitute legal advice. For any legal questions, consult a privacy lawyer or contact the authority responsible for enforcing the law.
-
This directory only lists comprehensive consumer data privacy regulations that were effective on the date of the last update.
-
This directory isn't a complete list of all existing data protection regulations worldwide. If you feel like your region's regulation should be added to it, please reach out to us.
-
This directory does not list specialized privacy regulations related to specific data types, such as health data or children data.
-
Remember that your data could be protected by a privacy regulation that isn't listed here. This will depend on the region, circumstances, and type of data involved.
Caution
When sharing personal information with a DPA, keep in mind this information could be shared with the subject of the complaint, and/or displayed publicly. Make sure to consult your DPA's privacy notice first, or ask anonymously how your complaint data might be shared before sending any sensitive information.
For example, the DPA for the state of Oregon in the United States specifies that: "Any information submitted to this form is subject to Oregon’s Public Records Law. You may choose not to include personally identifiable data that you do not wish to be subject to public records requests."
The Directory
{{< icon "fontawesome-solid-earth-africa" >}} Africa { .dpadirectory-button .dpadirectory-button-africa }
{{< icon "fontawesome-solid-earth-asia" >}} Asia { .dpadirectory-button .dpadirectory-button-asia }
{{< icon "fontawesome-solid-earth-europe" >}} Europe { .dpadirectory-button .dpadirectory-button-europe }
{{< icon "fontawesome-solid-earth-americas" >}} North America { .dpadirectory-button .dpadirectory-button-northamerica }
{{< icon "fontawesome-solid-earth-oceania" >}} Oceania { .dpadirectory-button .dpadirectory-button-oceania }
{{< icon "fontawesome-solid-earth-americas" >}} South America { .dpadirectory-button .dpadirectory-button-southamerica }
Africa
{{< dpa-directory-table region="africa" >}}
Asia
{{< dpa-directory-table region="asia" >}}
Europe
{{< dpa-directory-table region="europe" >}}
North America
{{< dpa-directory-table region="north-america" >}}
Oceania
{{< dpa-directory-table region="oceania" >}}
South America
{{< dpa-directory-table region="south-america" >}}
Additional resources
-
For EU GDPR: Helpful tips on how to proceed with your request or complaint (NOYB)
-
For EU GDPR: Explanation on the right to lodge a complaint (NOYB)
-
For missing regions1 : Check this Global Privacy Law and DPA Directory (IAPP)
-
For more information on each law: To learn more on each regulation, you can consult this useful database (DLA Piper)
-
Some information from IAPP's Global Privacy Law and DPA Directory might be out-of-date. ↩︎