Skip to content

Data Protection Authority

What is Data Protection Authority?

An independent public authority responsible for monitoring and enforcing data protection regulations within its jurisdiction.

Privacy and Data Protection

Each of these is named in at least one of the same controls as data protection authority. The number is how many controls name both.

What the standards actually require on data protection authority

Requirements naming data protection authority across 6 standards, quoted from the control text.

Establishment of an independent national authority responsible for ensuring personal data processing complies with the Convention.

MALABO-Art12 · National Personal Data Protection Authority →

The Datenschutzbehörde (DSB) is established as Austria's independent supervisory authority (DSG s18).

AT-DSG-7 · Section 18 - Establishment of the Data Protection Authority →

The Superintendence of Industry and Commerce (SIC), through a Delegatura for Personal Data Protection, exercises oversight to ensure compliance with the law.

CO-L1581-A19 · Data Protection Authority (SIC) →

Transfers not covered by adequacy, safeguards, binding corporate rules or the exceptions require the Authority's prior authorisation, with documented compliance;

ley-org-nica-de-protecci-n-de-datos-personales-lopdp::59 · Art. 59 and RGLOPDP Arts. 77 and 78: authorisation of other transfers and registration of all transfers →

Ghana DPA 2012 sectoral + regional + international coordination. GHANA CYBERSECURITY ACT 2020 (Act 1038, covered as its own framework): cybersecurity-incident-personal-data overlap;

GhDPA-Coord-Cyber-ECOWAS-Malabo-Status · Sectoral Coordination + ECOWAS + Malabo + 2024-2025 Pipeline + Status →

Act No. 90/2018 on Data Protection and the Processing of Personal Data (Log um personuvernd og vinnslu personuupplysinga nr. 90/2018) is the foundational Icelandic data protection law administered by Personuvernd (Icelandic Data Protection Authority).

ICELAND-Act90-Chap1-Scope-Definitions-EEA-GDPR-Personuvernd · Iceland Act No. 90/2018 - Chapter I Scope + Definitions + EEA Agreement + GDPR Application + Personuvernd Authority →

Questions people ask about data protection authority

What is Data Protection Authority?
An independent public authority responsible for monitoring and enforcing data protection regulations within its jurisdiction.
Why is Data Protection Authority important for compliance?
Data Protection Authority is a key concept in Privacy and Data Protection. Understanding data protection authority helps organizations meet regulatory requirements, reduce risk, and demonstrate due diligence during audits. Our compliance platform maps 1,016 frameworks with 316K cross-framework control mappings.
Which compliance frameworks address Data Protection Authority?
Data Protection Authority appears in the requirement text of African Union Malabo Convention, Austria Data Protection Act (Datenschutzgesetz, DSG, amended 2018), Colombia Data Protection Law (Law 1581 of 2012), Ecuador Ley Orgánica de Protección de Datos Personales (LOPDP), Ghana Data Protection Act 2012 (Act 843). Across these standards we have identified 9 controls that name it directly, each linked to the control text on the compliance platform.
Where can I learn more about Data Protection Authority?
Explore our compliance framework pages to see how data protection authority applies across different standards and regulations. Our implementation guides provide step-by-step guidance, and the compliance platform offers AI-powered analysis of how this concept maps across 1,016 frameworks.

See how Data Protection Authority applies across compliance frameworks

Our platform maps 1,016 frameworks with 316K cross-framework control mappings. Explore how this concept is addressed across standards.

Written and maintained by Gerard Blokdyk, The Art of Service.