| Countries/Economies | |
| Abu Dhabi Global Market | Office of Data Protection (2021) |
| Albania | Commissioner for Personal Data Protection (Komisionerin per Mbrojtjen e te Dhenave Personale) (now known as Information and Data Protection Commissioner of Albania) (2010) |
| Andorra | Data Protection Agency (Agència Andorrana de Protecció de Dades) (2006) |
| Argentina | Agencia de Acceso a la Información Pública (2018) |
| Ombudsman’s office of the City of Buenos Aires (2013) |
|
| Armenia | Personal Data Protection Agency (2016) |
| Astana International Financial Centre (AIFC) | Commissioner of Data Protection (2018) |
| Australia | Federal Privacy Commissioner (2002) (now known as Office of the Australian Information Commissioner) |
| New South Wales: Privacy Commissioner (2002) |
|
| Northern Territory: Information Commissioner (2003) |
|
| Victoria: Office of the Victorian Information Commissioner (OIVC) (2017) |
|
| Queensland: Office of the Information Commissioner (2021) (2017) |
|
| Austria | Data Protection Commission (Datenschutzkommission) (2002) (now known as Austrian Data Protection Authority) |
| Belgium | Data Protection Authority (Autorité de protection des données – Gegevensbeschermingsautoriteit)Supervisory Body for Police Information Management |
| Benin | National Commission for Informatics and Liberties (Commission Nationale de l’Informatique et des Libertés)(2015) |
| Bermuda | Office of the Privacy Commissioner of Bermuda (2020) |
| Bosnia and Herzegovina | Personal Data Protection Agency in Bosnia and Herzegovina (Agencija za zaštitu ličnih podataka u Bosni I Hercegovini) (2011) |
| Brazil | Autoridade Nacional de Poteção de dados (ANPD), (2023) |
| Bulgaria | Commission for Personal Data Protection (Комисия за защита на личните данни) (2010) |
| Burkina Faso | National Commission for Informatics and Liberties (Commission Nationale de l’Informatique et des Libertés) (2008) |
| Canada | Privacy Commissioner of Canada (Commissariat à la protection de la vie privée du Canada) (2002) |
| Alberta: Information and Privacy Commissioner (2003) |
|
| British Columbia: Information and Privacy Commissioner (2002) |
|
| Manitoba: Ombudsman (L’Ombudsman du Manitoba) (2002) |
|
| New Brunswick: Ombudsman (L’Ombud) (2006) |
|
| Newfoundland and Labrador: Office of the Information and Privacy Commissioner for Newfoundland and Labrador (2007) |
|
| Northwest Territories: Information and Privacy Commissioner (2006) |
|
| Nova Scotia: Freedom of Information and Protection of Privacy Review Office (2010) (now known as Office of the Information and Privacy Commissioner for Nova Scotia) |
|
| Nunavut: Information and Privacy Commissioner (2006) |
|
| Ontario: Information and Privacy Commissioner (Commissionaire à l’information et à la protection de la vie privée) (2002) |
|
| Quebec: Information Access Commission (Commission d’accès à l’information) (2002) |
|
| Saskatchewan: Information and Privacy Commissioner (2005) |
|
| Cape Verde | National Commission of Data Protection (Comissão Nacional de Protecção de Dados) (2016) |
| Cayman Islands | Cayman Islands Ombudsman (2020) |
| Chile | Chilean Transparency Council (Consejo para la Transparencia) (2019) |
| Colombia | Superintendence of Industry and Commerce of Colombia (Superintendencia de Industria y Comercio) (2012) |
| Costa Rica | Agency for the Protection of Personal Data of Inhabitants (2012) |
| Côte d’Ivoire | Telecommunications/ICT Regulatory Body (L’Autorité de Régulation des Télécommunications de Côte d’Ivoire – ARTCI) (2016) |
| Council of Europe | Data Protection Commissioner (2003) |
| Croatia | Data Protection Agency (Agencija za zaštitu osobnih Podataka) (2008) |
| Cyprus | Personal Data Protection Commissioner (Επίτρoπoς Προστασίας Δεδομένων Προσωπικού Χαρακτήρα) (2003) |
| Czech Republic | Office for Personal Data Protection (Urad Pro Ochranu Osobnich Udaju) (2002) |
| Denmark | Data Protection Agency (Datatilsynet) (2002) |
| Dubai International Financial Centre | Data Protection Commissioner (2020) |
| Ecuador | Superintendence of Personal Data Protection, Ecuador (2025) |
| Estonia | Data Protection Inspectorate (Andmekaitse Inspektsioon) (2006) |
| European Union | Customs Information System Joint Supervisory Authority (2003) |
| European Data Protection Supervisor (Contrôleur européen de la protection des données) (2004) |
|
| Finland | Data Protection Ombudsman (Tietosuojavaltuutetun Toimisto) (2002) |
| France | National Commission for Informatics and Liberties (Commission Nationale de l’Informatique et des Libertés) (2002) |
| FYROM (Macedonia) | Directorate of Personal Data Protection (2007) |
| Gabon | National Commission for the Protection of Personal Data (Autorité pour la Protection des Données Personnelles et de la Vie Privé (APDPVP)) (2019) |
| Georgia | Personal Data Protection Service of Georgia |
| Germany | Federal Data Protection Commissioner (Bundesbeauftragten für den Datenschutz) (2002) |
| Bavaria: Privacy Commissioner (Bayerische Landesbeauftragte für den Datenschutz) (2002) |
|
| Berlin: Data Protection and Freedom of Information Commissioner (Beauftragter für Datenschutz und Informationsfreiheit) (2002) |
|
| Brandenburg: Data Protection and Access to Information Commissioner (Landesbeauftragter für den Datenschutz und für das Recht auf Akteneinsicht) (2002) |
|
| Bremen: The State Commissioner for Data Protection and Freedom of Information, LDI (Die Landesbeauftragte für Datenschutz und Informationsfreiheit) (2014) |
|
| Hamburg: Data Protection Commissioner (Hamburgischer Datenschutzbeauftragter) (2002) |
|
| Hesse: Data Protection Commissioner (Hessische Datenschutzbeauftrage) (2002) |
|
| Mecklenburg–West Pomerania: Data Protection Commissioner (Landesbeauftragte für den Datenschutz Mecklenburg-Vorpommern) (2002) |
|
| North Rhine: Westphalia: Data Protection and Information Commissioner (2008) |
|
| Rhineland Palatinate: Data Protection Commissioner (Landesbeauaftragte für den Datenschutz Rheinland-Pfalz) (2002) |
|
| Saxony-Anhalt: Data Protection Commissioner (Landesbeauftragter für den Datenschutz Sachen-Anhalt) (2002) |
|
| Schleswig-Holstein: Privacy Commissioner (Unabhängiges Landeszentrum für Datenschutz) (2002) |
|
| Thuringer: Data Protection Commissioner (Thüringer Landesbeauftragte für den Datenschutz) (2002) |
|
| Bavarian Data Protection Authority, (Bayerisches Landesamt für Datenschutzaufsicht) (2018) |
|
| Gibraltar | Data Protection Commissioner (2006) |
| Ghana | Data Protection Commission (GDPC) (2014) |
| Greece | Hellenic Data Protection Authority (ΑΡΧΗ ΠΡΟΣΤΑΣΙΑΣ ΔΕΔΟΜΕΝΩΝ ΠΡΟΣΩΠΙΚΟΥ ΧΑΡΑΚΤΗΡΑ) (2002) |
| Guernsey | Office of the Data Protection Authority (Bailiwick of Guernsey) (2019) |
| Hong Kong | Privacy Commissioner for Personal Data (2002) |
| Hungary | Parliamentary Commissioner for Data Protection and Freedom of Information (Nemzeti Adatvédelmi és Információszabadság Hatóság) (2002) (now known as National Authority for Data Protection and Freedom of Information) |
| Iceland | Data Protection Authority (Persónuvernd) (2002) |
| Interpol | Commission for the Control of Interpol’s Files (Commission de Contrôle des Fichiers de l’O.I.P.C.Interpol) (2003) |
| Ireland | Data Protection Commission (An Coimisinéir Cosanta Sonraí) (2002) |
| Isle of Man | Isle of Man Information Commissioner (Oik Recortysser Codey Fysseree Ellan Vannin) (2002) |
| Israel | Israeli Privacy Protection Authority (הרשות להגנת הפרטיות) (2009) |
| Italy | Data Protection Commission (Garante per la protezione dei dati personali) (2002) |
| Jamaica | Office of the Information Commissioner, Jamaica (2025) |
| Japan | Personal Information Protection Commission (個人情報保護委員会) (2017) |
| Jersey | Data Protection Authority (2002) (now known as the Jersey Office of the Information Commissioner) |
| Kenya | Office of the Data Protection Commissioner (2022) |
| Kosovo | Information and Privacy Agency (Agjencia për Informim dhe Privatësi) (2013) |
| Latvia | State Data Inspectorate (Datu Valsts Inspekcija) (2002) |
| Liechtenstein | Data Protection Authority (2006) |
| Lithuania | State Data Inspectorate (Valstybine Duomenu Apsaugos Inspekcija) (2002) |
| Luxembourg | National Data Protection Commission (Commission nationale pour la protection des données) (2005) |
| Mali | Personal Data Protection Authority (Autorité de Protection de Données à Caractère Personnel) (2016) |
| Malta | Data Protection Commissioner (2003) |
| Mauritania | The Mauritanian Personal Data Protection Authority (2024) |
| Mauritius | Data Protection Office of Mauritius (2013) |
| Mexico | Federal Institute for Access to Information and Data Protection (Instituto Federal de Acceso a la Informacion y Proteccion de Datos) (2010) (now known as Institute: National Institute for Transparency, Access to Information and Personal Data Protection (Instituto Nacional de Transparencia, Acceso a la Información y Protección de Datos Personales) INAI) |
| Institute for Access to Public Information of the Federal District (Instituto de Acceso a la Informacion Publica del Distrito Federal) (2010) |
|
| State of Mexico Transparency, Public Information Access and Personal Data Protection Institute of Estado de México and municipalities, INFOEM (Instituto de Transparencia, Acceso a la Información Pública y Protección de Datos Personales del Estado de México y Municipios, INFOEM) (2015) |
|
| Institute for Transparency, Access to Information and Data Protection of Michoacán (Instituto Michoacano de Transparencia, Acceso a la Información y Protección de Datos Personales) (2022) |
|
| State Institute for Transparency, Access to Information and Personal Data Protection (Instituto Estatal de Transparencia, Acceso a la Información y Protección de Datos PersonalesPersonales) (INFO NL) (2022) |
|
| The Institute of Transparency and Access to Information of the State of Quintana Roo, Mexico (2024) |
|
| The Institute of Transparency and Access to Information of the State of Tamaulipas, Mexico (2024) |
|
| Moldova | National Center for Personal Data Protection (Centrului Naţional pentru Protecţia Datelor cu Caracter Personal l) (2010) |
| Monaco | Supervisory Commission for Personal Information (Commission de Contrôle des Informations Nominatives) (2009) |
| Montenegro | Agency for Personal Data Protection and Free Access to Information (2017) |
| Morocco | National Commission for the control and the protection of Personal Data (Commission nationale de contrôle et de protection des données personnelles) (2011) |
| Netherlands | Data Protection Commission (College bescherming persoonsgegevens) (2002) (now known as Autoriteit Persoonsgegevens) |
| New Zealand | Privacy Commissioner (Te Mana Matapono Matatapu) (2002) |
| Niger | Haute Autorite de Protection des Donnees a Caractere Personnel (HAPDP), (2023) |
| Nigeria | Nigeria Data Protection Commission (NDPC), (2023) |
| Norway | Data Inspectorate (Datatilsynet) (2002) (2012) |
| Organisation for Economic Co-operation and Development | Data Protection Commissioner (2019) |
| Peru | National Authority for Data Protection (Autoridad Nacional de Protección de Datos Personales) (2012) |
| Philippines | National Privacy Commission (2016) |
| Poland | Personal Data Protection Office (Urząd Ochrony Danych Osobowych) (2002) |
| Portugal | National Data Protection Commission (Comissão Nacional de Protecção de Dados) (2002) |
| Qatar | The Qatar National Cybersecurity Agency (2024) |
| The Data Protection Office of the Qatar Financial Centre (2024) |
|
| Republic of Korea | Korea Internet & Security Agency (한국인터넷진흥원) (2004) |
| Korea Communications Commission (2018) |
|
| Personal Information Protection Commission (개인정보보호위원회) (2012) |
|
| Republic of North Macedonia | Directorate of Personal Data Protection (now known as Personal Data Protection Agency) (Агенција за заштита на личните податоци) (2007) |
| Romania | National Supervisory Authority for Personal Data Protection (Autorităţii Naţionale de Supraveghere a Prelucrării Datelor cu Caracter Personal) (2006) |
| San Marino | Autorità Garante per la protezione dei dati personali (2019) |
| Saudi Arabia | Saudi Data and Artificial Intelligence Authority (2025) |
| São Tomé and Príncipe | National Agency for the Protection of Personal Data (Agência Nacional de Protecção de Dados Pessoais) (2019) |
| Serbia | Commissioner for Information of Public Importance and Personal Data Protection (Повереник за информације од јавног значаја и заштиту података о личности) (2012) |
| Senegal | Commission of Personal Data Protection, CDP (La Commission de Protection de Données Personnelles) (2014) |
| Singapore | Personal Data Protection Commission, Singapore (2025) |
| Slovakia | Office for Personal Data Protection of the Slovak Republic (Úrad na ochranu osobných údajov Slovenskej republiky) (2002) |
| Slovenia | Human Rights Ombudsman (Varuh Èlovekovih Pravic) (2002) |
| Information Commissioner of the Republic of Slovenia (Informacijski pooblaščenec) (2007) |
|
| South Africa | Information Regulator (2017) |
| Spain | Data Protection Commissioner (Agencia de Protección de Datós) (2002) |
| Basque Country: Data Protection Commissioner (Agencia Vasca de Protección de Datos) (2005) |
|
| Catalonia: Catalan Data Protection Agency (Agència Catalana de Protecció de Dades) (2004) |
|
| Transparency and Data Protection Council of Andalusia (Consejo de Transparencia y Protección de Datos Personales de Andalucia) (2022) |
|
| Sweden | Data Inspection Board (now known as Swedish Authority for Privacy Protection) (Integritetsskyddsmyndigheten) (2002) |
| Switzerland | Federal Data Protection and Information Commissioner (Préposé féderal à la protection des données et à la transparence) (2002) |
| Canton of Basel-Landschaft: Data Protection Commissioner (Datenschutzbeauftragte des Kantons Basel-Landschaft) (2005) |
|
| Canton of Basel-Stadt: Data Protection Commissioner (Datenschutzbeauftragter des Kantons Basel-Stadt) (2015) |
|
| Zug Canton: Data Protection Commissioner (Datenschutz-beauftragter des Kantons Zug) (2002) |
|
| Zurich Canton: Canton Data Protection Commissioner (Datenschutzbeauftrager des Cantons Zürich) (2002) |
|
| Canton of Bern: Data Protection Commissioner (Datenschutzbeauftragter des Kantons Bern) (2020) |
|
| Tunisia | National Personal Data Authority (Instance National de Protection des Données Personnelles) (2012) |
| Turkiye | Personal Data Protection Authority (Kişisel Verileri Koruma Kurumu) (2017) |
| Uganda | The Uganda Personal Data Protection Office (2024) |
| Ukraine | Ukrainian Parliament Commissioner for Human Rights (Уповноваженого Верховної Ради України з прав людини) (2015) |
| United Kingdom | Information Commissioner’s Office (2002) |
| United States of America | Federal Trade Commission (2010) |
| California Privacy Protection Agency (2022) | |
| Uruguay | Regulatory and Control Unit of Personal Data (Unidad Reguladora y de Control de Datos Personales) (2009) |
| Zimbabwe | The Zimbabwe Postal and Telecommunications Regulatory Authority (2024) |
Former members
- Joint Supervisory Body of Europol, European Union: Accredited 2003, abolished
2017. - Data Protection Agency of the Region of Madrid (Agencia de Protección de Datos de la Comunidad de Madrid),
Spain: Accredited 2003,
abolished 2012. - The Board of the National Institute for Transparency, Access to Information, and Personal Data Protection of
Mexico. The Board of this Body is integrated by Commissioners Adrián Alcalá Méndez (INAI´s President), Josefina
Román Vergara (GPA works coordinator), Blanca Lilia Ibarra Cadena and Norma Julieta del Río Venegas: abolished
March 2025.