The Catalan Data Protection Authority (APDCAT) is the independent authority responsible for safeguarding the right to the protection of personal data within the Catalan public sector and the private sector when carrying out public functions and services, including professional associations and public and private universities in Catalonia.

What do we do?

• • We protect citizens’ rights: we handle complaints and claims submitted by citizens when entities and organisations fail to comply with the General Data Protection Regulation (GDPR).
  • We advise organisations: we provide information and resources to organisations and support them in complying with data protection legislation. We promote technological innovation that respects the right to data protection and privacy.
  • We promote training and awareness: we organise courses, conferences and workshops. We develop educational materials to raise awareness of the rights and obligations that guarantee citizens’ privacy and data protection rights.
  • We supervise entities: we monitor compliance with data protection legislation by entities within the Catalan public sector, as well as by private companies that provide services to them, such as cloud computing and ICT services. We also advise them on incorporating privacy by design from the outset of every project.