Data Protection Authorities
Last update: 2026-03-30
The Data Protection Authority (DPA) Directory is a tool to help you find the main consumer privacy law in your region, and the authority mandated to enforce the law.
Additionally, this table provides information about each law, authority, contact information for questions, and a link to place a complaint for violation of the law with each authority.
More information on privacy laws and reporting violations
-
For more information on how to find a specific privacy law that might not be listed here, and what to look for when reading it, consult the Privacy Activist Toolbox tip to Know Your Privacy Laws.
-
For more information on how to proceed when reporting a privacy law violation, consult the Privacy Activist Toolbox tip to Report Privacy Violations.
Scope and limitations
-
This directory does not constitute legal advice. For any legal questions, consult a privacy lawyer or contact the authority responsible for enforcing the law.
-
This directory only lists comprehensive consumer data privacy regulations that were effective on the date of the last update.
-
This directory isn't a complete list of all existing data protection regulations worldwide. If you feel like your region's regulation should be added to it, please reach out to us.
-
This directory does not list specialized privacy regulations related to specific data types, such as health data or children data.
-
Remember that your data could be protected by a privacy regulation that isn't listed here. This will depend on the region, circumstances, and type of data involved.
Privacy warning
When sharing personal information with a DPA, keep in mind this information could be shared with the subject of the complaint, and/or displayed publicly. Make sure to consult your DPA's privacy notice first, or ask anonymously how your complaint data might be shared before sending any sensitive information.
For example, the DPA for the state of Oregon in the United States specifies that: "Any information submitted to this form is subject to Oregon’s Public Records Law. You may choose not to include personally identifiable data that you do not wish to be subject to public records requests."
The Directory
Africa
Asia
Europe
North America
Oceania
| Region | Privacy Law | Abbreviation | DPA | Contact | Complaint |
|---|---|---|---|---|---|
| Australia | Privacy Act 1988 | Privacy Act | Office of the Australian Information Commissioner (OAIC) | Contact Page | Complaint Link |
| New Zealand | Privacy Act 2020 | - | Office of the Privacy Commissioner (OPC) | Contact Page | Complaint Link |
South America
| Region | Privacy Law | Abbreviation | DPA | Contact | Complaint |
|---|---|---|---|---|---|
| Argentina | Personal Data Protection Law | Law 25.326 | Agencia de Acceso a la Información Pública (AAIP) | Contact Page | Complaint Link |
| Brazil | Lei Geral de Proteção de Dados (General Personal Data Protection Law) | LGPD | Autoridade Nacional de Proteção de Dados (ANPD) | Contact Page | Complaint Link |
| Colombia | Law 1581 of 2012 | Law 1581 | Deputy Superintendence for Personal Data Protection of the Superintendence of Industry and Commerce (SIC) | Contact Page | Complaint Link |
| Peru | Ley de Protección de Datos Personales 29733 | Ley No. 29733 | Autoridad Nacional de Protección de Datos Personales (ANPD) | Contact Page | Complaint Link |
| Uruguay | Ley de Proteccion de Datos Personales | Law 18.331 | Unidad Reguladora y de Control de Datos Personales (URCDP) | Contact Page | Complaint Link |
Additional resources
-
For EU GDPR: Helpful tips on how to proceed with your request or complaint (NOYB)
-
For EU GDPR: Explanation on the right to lodge a complaint (NOYB)
-
For missing regions1: Check this Global Privacy Law and DPA Directory (IAPP)
-
For more information on each law: To learn more on each regulation, you can consult this useful database (DLA Piper)
-
Some information from IAPP's Global Privacy Law and DPA Directory might be out-of-date. ↩