Mapa web

• Director's welcome
• Advisory Board
• Organizations and functions
  • The Catalan Data Protection Authority
  • Management
  • General Secretary
  • Legal Advice
  • Inspection and Technical Department
  • Coordination of Technology and Security of Information
• Authority services

• Data Protection Officer
• Regulations
  • General Data Protection Regulation
  • Regulatory legislation of the Authority
  • National legislation
  • International legislation
    • European Union
    • Council of Europe
  • Provisions adopted by the Authority
    • Instructions
    • Recommendations
    • Other provisions
• Record of processing activities (Catalan version available)

• Data protection notice
• Annual Report
• Data protection authorities and other institutions of interest

• Know your rights
  • Right to information
  • Informational self-determination Rights
    • Right of access
    • Right to rectification
    • Right to erasure (right to be forgotten)
    • Right to object
    • Right to Restriction of Processing
    • Right to data portability
    • Right to object and automated individual decision-making
  • Right to withdraw consent
  • Right to compensation
  • Exceptions that may limit your rights
  • Right not to receive unsolicited advertisments
• Claim and complain
  • Claim
  • Complain

• Promotion of codes of conduct
• File controllers obligations
  • When do you have the obligation to apply the GDPR?
  • Obligations when processing personal data
    • Applying the principles of data protection
    • Identifying the legal basis that allows the processing
    • Informing and being transparent
    • Attending to and facilitating the exercise one’s rights to information-based self-determination
    • Appointing and communicating a data protection officer
    • Applying data protection by design and by default
    • Analysing the risks to rights and freedoms
    • Preparing an impact assessment related to data protection
    • Analysing risks and applying security measures
    • Notifying personal data security breaches
    • Regulating the relationship between the data controller and the data processor
    • Registering and publishing processing activities

• Schengen Information System
• General Data Protection Regulation
  • Main developments of the GDPR
  • Frequently asked questions
  • How can controllers and processors adapt to the GDPR before May 2018?
    • What should controllers and processors do to adapt their activity to the new Regulation?
    • Checklist
  • Regulation texts
  • Others documents and tools of interest
    • Data Protection Impact Assessment Guide
    • RGPD Data Processor Guide
    • European Data Protection Board and Article 29 Data Protection Working Party Guidelines
  • Conferences

• Games
  • You choose !! (Short version)
  • You choose !! (Long version)

• DPO network
• Project 'Who are you? Data that talk about you'
• Secure Data
  • Vishing
  • App permissions
  • Smishing
  • Mobile security
  • Facial Recognition
  • Two-factor authentication
  • Phishing
  • Passwords
  • Password managers
  • Sharenting
• Tools to download
• Resolutions, opinions and reports
  • Resolutions, opinions and reports search tool

• Frequently asked questions
  • Scope of action of the Catalan Data Protection Authority
  • FAQs for controllers/processors (obligations)
    • Legal basis
    • Special categories of data
    • Exercise of rights
    • Record of processing
    • The data protection officer
    • International transfers
    • DPIA
    • Risk management
    • Notification of data breaches
    • The data processor
  • FAQs for data subjects
    • Consent
    • Rights of data subjects
    • Complaints
    • Education
    • Healthcare
  • Definitions
  • Entry into force of the General Data Protection Regulation and the LOPDGDD
• Data Protection Basic Guides
  • APDCAT Guides
    • Privacy by design and privady by default. A guide for developers
    • Data Protection Guidelines for Schools
    • Data Protection Impact Assessment Guide
    • RGPD Data Processor Guide
  • European Data Protection Board and Article 29 Working Party Guidelines
• Pills of Data Protection
• Decalogue of Data Protection
• Models of exercise of rights
  • Right of access
  • Right to rectification
  • Right to erasure (right to be forgotten)
  • Right to object
  • Right to Restriction of Processing
  • Right to Data Portability
  • Claim
  • Complain

• Audit reports
• Research studies
• Entrepreneurship and career opportunities
• Artificial intelligence

• News
• Training activities and conferences
• Media resources
  • Videos
    • Conferences and events
    • Fairs and congresses
    • Campaigns

• Corporate identity
• Social networks

• International conferences
• Contact