International transfers


The GDPR provides that each member state must establish that the supervision of the application of the GDPR is the responsibility of one or more independent authorities. Thus, it expressly provides for the possibility that there may be several data protection authorities in a state.

In accordance with the GDPR, the competent supervisory authority in matters of international transfers with respect to entities included in the scope of action of the Catalan Data Protection Authority is this same Authority, given that in states where there is more than one authority, each one is responsible for exercising all of the functions established in article 57, including those provided for in letter (r) on international transfers.

Last update: 19.12.2025