AEPD (Spain)

The Agencia Española de Protección de Datos (abbreviated "AEPD") is the national Data Protection Authority for Spain. The AEPD is an independent public body in charge of enforcing the GDPR in Spain. Its head office is in Madrid. The requirement to have a data protection authority stems from Article 44 of the Spanish Data Protection Act, which is the national act developing the GDPR in Spain. The AEPD is affiliated to the Spanish Government via the Ministry of Justice.

There are three other independent regional data protection authorities in Spain that for the public sector: the Catalan Data Protection Authority (Autoritat Catalana de Protecció de Dades or Autoridad Catalana de Protección de Datos), the Basque Data Protection Authority (Datuak Babesteko Euskal Bulegoa or Agencia Vasca de Protección de Datos) and the Andalusian Data Protection Authority (Consejo de Transparencia y Protección de Datos de Andalucía).

Average time for pending cases
2 years 3 months 5 days
Average time for closed cases
1 year 9 months 1 day

noyb GDPR Complaints

    Case Controller Status Duration
    C029-61 Vacaciones eDreams S.L. Won Filed:
    (3 years 10 months ago)
    C029-62 Freepik Pending (3 - 4 years) Filed:
    (3 years 10 months ago)
    C029-63 Airbnb Ireland UC Pending (3 - 4 years) Filed:
    (3 years 10 months ago)
    C029-64 Poko B.V. Pending (3 - 4 years) Filed:
    (3 years 10 months ago)
    C029-71 Real Academia Española Other Outcome Filed:
    Closed:
    (1 year 8 months)
    C033 Apple Ireland Lost Filed:
    Closed:
    (2 years 4 months)
    C037-10146 GRUPO MASSIMO DUTTI, S.A. Pending (18 - 24 months) Filed:
    (1 year 10 months ago)
    C037-11662 Volkswagen Group Sverige AB Pending (2 - 3 years) Filed:
    (2 years 10 months ago)
    C037-12417 Cine Nueva Tribuna Pending (18 - 24 months) Filed:
    (1 year 10 months ago)
    C037-220 Ediciones Deportivas Catalanas S.A. Pending (2 - 3 years) Filed:
    (2 years 10 months ago)
    C037-221 Adevinta Spain S.L.U. Partly Won Filed:
    (2 years 10 months ago)
    C037-222 CaixaBank, S.A. Partly Won Filed:
    (2 years 10 months ago)
    C065 Ryanair DAC Pending (6 - 12 months) Filed:
    (10 months 4 weeks ago)
    C081-02 Meta Platforms Ireland Limited Pending (0 - 6 months) Filed:
    (2 weeks 4 days ago)