Back to all glossary articles

Data protection authority (DPA)

A data protection authority (DPA) is an independent public authority that supervises the application of the data protection law and protects the fundamental rights and freedoms of data subjects related to the processing of Personal data . Each EU Member State has its own DPA.

The primary roles of DPAs in the EU involve:

  • Handling data breach reports.
  • Consistently interpreting and enforcing Data privacy and protection laws across the EU.
  • Offering expert advice to businesses on data protection issues and compliance.
  • Managing complaints from individuals alleging GDPR violations.
  • Interpreting aspects of EU law, particularly regarding GDPR.
  • Managing fines and other noncompliance penalties.
Data controllers

are typically obligated to inform users about their right to lodge a complaint and provide information about the DPA to reach out to.

  • How to recover lost conversions without adding compliance risk

    Not every visitor who leaves is lost. Some just need a nudge. Funnel Recovery brings them back to the form, booking or application they started, using analytics and data activation tools your compliance team already approved.

  • PHI and PII

    HIPAA violations and fines: What healthcare organizations need to know

    Quick summary HIPAA violations happen when a covered entity or business associate fails to meet the HIPAA Privacy, Security or Breach Notification Rule. Civil penalties range from a few hundred dollars to more than $2 million per violation, set across four tiers based on how much the organization knew.  What this guide covers: HIPAA violation…

Other definitions

Recent posts from Piwik PRO blog