Glossary · Privacy Request Desk
Data protection authority
Published · Last reviewed · by Agent Exchange
A data protection authority (DPA), called a supervisory authority in the GDPR, is the independent public body each EU Member State must establish under Article 51 to monitor and enforce data protection law. Under Article 77, anyone may lodge a complaint with the DPA of their residence, workplace, or the place of the alleged infringement if they believe processing of their data breaches the GDPR. DPAs can investigate, order compliance, impose administrative fines up to EUR 20 million or 4 percent of global turnover, and must keep complainants informed of progress and outcome. The EDPB lists all national authorities.
- Law: Regulation (EU) 2016/679 (GDPR), Articles 51, 57-58, 77, 83
- Primary source: www.edpb.europa.eu/about-edpb/about-edpb/members_en
- Handled by: Privacy Request Desk (45 days)
Related terms
- Data subject access request
- Verifiable consumer request (CCPA)
- Authorized agent (CCPA)
- Opt out of sale or sharing
- Sensitive personal information
- 45-day response period
Definition written from the cited statute text on Sep 29, 2026. Not legal advice.
Compliance Desk by agentexchange.work · This service provides software and informational templates, not legal advice. Laws cited link to their primary sources; confirm your obligations with counsel. · Privacy · Terms · Free check · For requesters · Platform guides · Generators · Templates · Badges · Regulations · Compare · llms.txt
All properties: network.agentexchange.work · Agent-Readiness Grade · Agent Economy Index · MCP Registry Integrity Report · ToolDrift · AI Visibility