Catalan Data Protection Authority
Transparency
Seu electrònica
CAT
OC
EN
ES
Who we are
Who we are
Welcome from the director
About us
About us
Scope of action
Functions
Organization
Projects we’ve taken
Scope of action
Functions
Organization
Projects we’ve taken
International presence
International presence
International conferences
International working groups
Other control agencies and authorities
International conferences
International working groups
Other control agencies and authorities
Meritxell Borràs i Solé
Public
Public
Know your rights
Know your rights
Right to information
Right of access
Right of rectification
Right to erasure/ right to be forgotten
Right to object
Right to restriction of processing
Right to data portability
Right to object to automated individual decision-making
Right to revoke consent
Right to compensation
Right to object to direct marketing
Exceptions that may limit your rights
Right to information
Right of access
Right of rectification
Right to erasure/ right to be forgotten
Right to object
Right to restriction of processing
Right to data portability
Right to object to automated individual decision-making
Right to revoke consent
Right to compensation
Right to object to direct marketing
Exceptions that may limit your rights
Claims and reporting
Consulting the entity’s data protection officer
Tips for preserving your privacy
Organizations
Organizations
What is your role in data processing?
When do you have the obligation to apply the GDPR?
Procedures for organizations
Obligations when processing personal data
Resources for entities and entrepreneurs
Opinions, resolutions and reports
Codes of conduct
Consulting the entity’s data protection officer
International data transfers
Regulations and Jurisprudence
Regulations and Jurisprudence
Data protection regulations
Regulatory framework of the APDCAT
Instructions and recommendations
Guidelines of European entities
Relevant rulings
Frequently asked questions about data protection
Frequently asked questions about data protection
Definitions
Scope of action of the Catalan Data Protection Authority
Entry into force of the General Data Protection Regulation and the LOPDGDD
FAQs for organizations
FAQs for data subjects
Definitions
Scope of action of the Catalan Data Protection Authority
Entry into force of the General Data Protection Regulation and the LOPDGDD
FAQs for organizations
FAQs for data subjects
Resources
Resources
Opinions, reports and resolutions
Audit reports
Instructions and recommendations
Data protection guidelines
Data protection guidelines
APDCAT guidelines
Guidelines and orientations from other organizations
APDCAT guidelines
Guidelines and orientations from other organizations
Applications to facilitate regulatory compliance
Applications to facilitate regulatory compliance
Records of processing activities application
DPIA application
Records of processing activities application
DPIA application
Frequently asked questions about data protection
Frequently asked questions about data protection
Definitions
Scope of action of the Catalan Data Protection Authority
Entry into force of the General Data Protection Regulation and the LOPDGDD
Preguntes per a organitzacions
Preguntes per a persones afectades
Definitions
Scope of action of the Catalan Data Protection Authority
Entry into force of the General Data Protection Regulation and the LOPDGDD
Preguntes per a organitzacions
Preguntes per a persones afectades
Templates and forms for regulatory compliance
Reports, studies, and research
Training and dissemination
Training and dissemination
Courses
Conferences
Fairs and congresses
Courses
Conferences
Fairs and congresses
Awareness materials
Awareness materials
Promotional campaigns and videos
Infographics
Podcasts
Games and stories
Articles
Promotional campaigns and videos
Infographics
Podcasts
Games and stories
Articles
News
News
News
Agenda
Visual Identity
Contact
Transparency
Seu electrònica
Idioma:
Idioma
CAT
OC
EN
ES
Home
Regulations and Jurisprudence
Frequently asked questions about data protection
FAQs for organizations
Preguntes per a organitzacions
Legal basis
Special data categories
Record of processing activities
Data Protection Officer
International data transfers
Data Protection Impact Assessment (DPIA)
Risk management
Security Breach Notification
Data processor
Last update: 15.01.2026
