APDP - Autorité de Protection des Données Personnelles

What APDP - Autorité de Protection des Données Personnelles does

APDP (Autorité de Protection des Données Personnelles) is the statutory personal data protection authority of the Principality of Monaco, in operation since 1993 and headquartered at Le Concorde, 11 rue du Gabian, Monaco. It operates under Monaco Law No. 1.565 dated December 3, 2024, which establishes the legal framework for personal data protection in the Principality and grants APDP exclusive authority to oversee compliance, receive mandatory data breach notifications, authorize international data transfers, and issue binding regulatory opinions. The authority serves two principal constituencies: individuals (Particuliers) seeking to understand and exercise their personal data rights, and organizations (Professionnels) operating in Monaco that must comply with data protection obligations.

Its core services are regulatory rather than technological: processing breach notifications, issuing deliberations (e.g., Deliberations 2026-13, 2026-09, 2026-08) on data processing and international transfers, publishing opinions on legislative drafts (such as the ministerial decree on adequate countries), and conducting sector outreach (e.g., the March 2025 presentation to the Chambre Monégasque de l'Assurance). The organization has approximately 8 employees and distributes guidance through a bilingual French/English website, email newsletter, LinkedIn presence, and in-person office hours.

As a public regulatory body, APDP does not generate commercial revenue and does not charge fees for its services; funding is sourced through the Monegasque government's budget. The entity is not a technology vendor and offers no software products, APIs, or AI capabilities of its own. Its strategic posture is increasingly outward-facing: it participates in international regulatory coordination (joint declaration with 61 data protection authorities on AI-generated images, February 2026), collaborates with peer authorities such as Luxembourg's CNPD, and engages regulated entities including healthcare (Centre Hospitalier Princesse Grace) and financial institutions (Barclays) on cross-border transfer authorizations.

Name

APDP - Autorité de Protection des Données Personnelles

Legal name

APDP - Autorité de Protection des Données Personnelles

Website

https://ccin.mc

Company type

Private

Operating status

Operating

Headcount range

1–10 employees

Short description

APDP is Monaco's statutory personal data protection authority, operating under Law No. 1.565 since 1993 to oversee data protection compliance, issue binding regulatory decisions, and serve individuals and organizations in the Principality. It is government-funded and provides services free of charge.

Ownership category

akta.pro rank

Product category

Data Protection Regulation

NAICS

Executive, Legislative, and Other General Government Support (9211), National Security and International Affairs (9281)

akta.pro primary industry

Executive Office / Cabinet Secretariat (BPAIAAAA)

akta.pro secondary industry

Privacy Management (Consent, DSAR, RoPA) (HDADAFAH)

Keywords

• Data protection regulation
• Privacy compliance oversight
• Regulatory authority services
• Data breach notification handling
• Personal data rights guidance

Headquarters

HQ city

Monaco

HQ country

Monaco

HQ region

Europe

Offices1 record

Markets served

GTM type

B2B and B2C

Offering type

Services

Cost components

Personnel, Operations, Infrastructure, Others

Distribution channels4 records

Marketing channels5 records

Core offering

APDP is the government regulatory authority of the Principality of Monaco responsible for overseeing personal data protection under Law n° 1.565. It processes data processing declarations and authorizations (including international transfers and medical research), receives and handles mandatory data breach notifications, issues binding regulatory opinions and deliberances, and provides guidance on data protection rights to individuals and compliance obligations to organizations operating in Monaco. All services are delivered at no cost as public regulatory functions of the Monegasque State.

Product overview

L'APDP (Autorité de Protection des Données Personnelles) est l'autorité de régulation monégasque pour la protection des données personnelles, analogous à la CNIL française. Elle n'est pas une entreprise technologique proposant des produits logiciels, mais une institution publique offrant des services réglementaires : accompagnement des particuliers dans la connaissance de leurs droits, assistance aux professionnels pour leurs obligations légales, traitement des notifications de violations de données, délibérations et autorisations pour les traitements de données (notamment transfers internationaux et recherches médicales), ainsi que publication de veille réglementaire et recommandations. L'ensemble constitue des services publics de régulation plutôt qu'un portfolio de produits technologiques.

Differentiator

Problem solved

Functional benefit

Products and services

• Data processing declarations and authorizations (Déclarations et autorisations de traitements de données) Approval and deliberation process for personal data processing activities, including international data transfers to third countries and medical research studies involving patient data. For organizations operating in Monaco that require authorization before processing personal data under Law n° 1.565.
• Compliance forms and templates (Formulaires et courriers pour les démarches) Tools and forms made available to professionals to carry out their procedures with APDP and meet their personal data protection obligations. For organizations operating in Monaco that must comply with Law n° 1.565.
• Regulatory news and publications (Veille réglementaire et publications) Dissemination of APDP news, deliberations, opinions, and recommendations regarding personal data protection in the Principality of Monaco. For both individuals and professionals seeking current regulatory developments and authoritative guidance.
• Individual data subject assistance (Accompagnement des particuliers) Information and assistance to individuals on their personal data protection rights, including rights of access and remedies in case of violation. For individuals (data subjects) in Monaco or whose data is processed by Monaco-based entities.
• Data breach notification handling (Notification de violations de données) Service for receiving and processing mandatory personal data breach notifications, with publication of associated decisions and opinions. For data controllers and processors operating in Monaco that must report violations without delay.

Segments2 records

Ideal customer profiles2 records

Technology focussed No

API detail

Has API

No

API docs

API detail

Core technology

AI maturity

App detail

Partnerships

Four partnerships are on record, tiered core and minor.

• 61 International Data Protection AuthoritiescoreStrategic or Co-development Partner · 23 February 2026APDP joined 60 other data protection authorities worldwide in publishing a joint declaration on AI-generated images (February 23, 2026), demonstrating international cooperation on emerging technology regulation. This represents APDP's participation in global regulatory coordination on data protection issues.
• CNPD Luxembourg (Commission nationale pour la protection des données)coreStrategic or Co-development PartnerAPDP collaborates with Luxembourg's CNPD on international data protection matters. An APDP agent attended a working meeting in Luxembourg on data protection in humanitarian aid, demonstrating active cross-border regulatory cooperation between European data protection authorities.
• Centre Hospitalier Princesse GraceminorOthersCHPG serves as the representative in Monaco for external healthcare institutions (such as CHU Rennes) and is subject to APDP's regulatory oversight for data processing activities, including research data transfers.
• Chambre Monégasque de l'AssuranceminorStrategic or Co-development PartnerAPDP conducted a presentation on March 10, 2025 to approximately twenty Monaco insurance industry actors on their new data protection obligations, demonstrating APDP's outreach and compliance assistance role for regulated sectors.

Scale indicators1 record

Recent moves6 records

Expansion highlights4 records

Direct peers

• Datenschutzbehörde (Austrian DPA): Austrian data protection authority performing the same regulatory supervision and opinion-issuance functions as APDP, operating under a comparable national-law framework within the broader European GDPR ecosystem.
• CNPD Luxembourg (Commission nationale pour la protection des données): Luxembourg's national data protection authority; directly collaborates with APDP including working meetings on humanitarian aid data protection. Operates with a similar regulatory framework to APDP and serves as APDP's most active cross-border partner.
• Garante per la protezione dei dati personali: Italy's national data protection authority with identical regulatory functions to APDP: oversight, breach notification handling, opinions on international transfers, and binding decisions under national data protection law.
• CNIL (Commission Nationale de l'Informatique et des Libertés): France's national data protection authority, directly analogous to APDP in mandate and structure. Provides regulatory oversight, issues opinions on data processing and transfers, and enforces data protection law — the template that APDP explicitly references as its model.
• Commission de la protection de la vie privée (Belgium DPA): Belgium's data protection authority equivalent to APDP in regulatory mandate, breach oversight, and issuance of opinions on cross-border processing — particularly comparable for cross-border cases touching multi-jurisdictional Belgian/Monegasque entities.
• Spanish Data Protection Authority (AEPD): Spain's national DPA performing the same regulatory functions as APDP, including supervision of compliance, breach notification processing, and issuance of opinions on international data transfers within the European framework.

Broad incumbents

• Information Commissioner's Office (ICO): UK's data protection and information rights authority. Larger and broader in mandate than APDP, but highly comparable in performing DPA functions (oversight, breach response, guidance) — useful as a resource-rich peer reference.

Regional players

• Commission de protection des données personnelles (French-speaking Belgian DPA predecessor): Same Belgian DPA institution; relevant as a Francophone regional counterpart offering bilingual (FR/NL) regulatory capacity comparable to APDP's French/English bilingual delivery model in a smaller jurisdiction.

Market position

Strengths3 records

Weaknesses4 records

Competitive moat3 records

Key risks5 records

Key highlights5 records

Customer concentration

• LinkedInlinkedin.com/company/autorite-de-protection-des-donnees-personnelles

Revenue estimate

Valuation estimate

Number of profiles

Funding overview

Funding rounds

Investors

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about APDP - Autorité de Protection des Données Personnelles