AEPD (Spain)

The Agencia Española de Protección de Datos (abbreviated "AEPD") is the national Data Protection Authority for Spain. The AEPD is an independent public body in charge of enforcing the GDPR in Spain. Its head office is in Madrid. The requirement to have a data protection authority stems from Article 44 of the Spanish Data Protection Act, which is the national act developing the GDPR in Spain. The AEPD is affiliated to the Spanish Government via the Ministry of Justice.

There are three other independent regional data protection authorities in Spain that for the public sector: the Catalan Data Protection Authority (Autoritat Catalana de Protecció de Dades or Autoridad Catalana de Protección de Datos), the Basque Data Protection Authority (Datuak Babesteko Euskal Bulegoa or Agencia Vasca de Protección de Datos) and the Andalusian Data Protection Authority (Consejo de Transparencia y Protección de Datos de Andalucía).