Welcome to the Catalan Data Protection Authority website.
We strive at the Authority to guarantee the right to the protection of personal data in all that falls within the scope of competencies attributed to us by the Statute of Autonomy of Catalonia. We advise about rights in this area, how to exercise them and what to do if they are not respected. We also offer information on the obligations imposed by legislation and oversee that all entities comply with them.
These obligations take on a special relevance in the new digital society that together we are creating. Data, and in particular personal data, have become the basis of economic, social and political development.
How we live and interact is being shaped by the emerging technologies, which are based on the processing of our personal data and which have prompted the recent reform of European data protection legislation. This reform came into effect in 2016, with approval of Regulation (EU) 2016/679 of the European Parliament and of the Council, of 27 April 2016, on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, also known as the General Data Protection Regulation (GDPR).
As from 25 May 2018, the GDPR is binding in its entirety and fully applicable in all EU member countries.
The Regulation represents a paradigm shift, a new way of understanding and safeguarding the right to data protection and, consequently, the entire set of people’s rights and freedoms.
With this future vision, the Catalan Data Protection Authority is focusing its efforts on achieving the two main goals that are cornerstones of the GDPR: on the one hand, to strengthen people’s rights, providing them with tools to maintain effective control over their personal data; and on the other, to ensure that public and private entities are fully committed to the rights and freedoms of natural persons, following the principle of accountability and adopting a risk-based approach that enables them to adapt their actions to the real risks involved in the processing they undertake.
So I greet you and welcome you to our website.
Maria Àngels Barbarà i Fondevila
Director of the Catalan Data Protection Authority
Professional career of the Director