Úřad pro ochranu osobních údajů

What Úřad pro ochranu osobních údajů does

Úřad pro ochranu osobních údajů (ÚOOÚ) is the Czech Data Protection Authority, an independent administrative authority established on 1 June 2000 and headquartered at Pplk. Sochora 27, Prague 7. It is the sole statutory supervisor of personal data protection in the Czech Republic under Act No. 101/2000 Coll. and the GDPR, and since January 2020 also has jurisdiction over freedom-of-information proceedings under Act No. 106/1999 Coll. Its mandate covers enforcement, complaints handling, breach notifications, inspections, fines, supervisory oversight of commercial communications, and participation in the European Data Protection Board (EDPB) for cross-border matters.

The office's core product/technology surface is narrow and operational rather than commercial: it administers the Informační systém ORG (ORG Information System), a basic-registry component of the Czech e-Government framework that manages source and agenda identifiers for natural persons; runs a free email newsletter and public-facing website; and provides direct public access channels for complaints and consultations. Internally it operates with 41 staff led by Chairman Jiří Kaucký and Vice-Chairmen Josef Mička and Petr Jäger.

ÚOOÚ's business model is non-commercial. It charges no fees for regulatory or supervisory services and is funded entirely through the Czech state budget. Its customer segments — Czech citizens, businesses and organizations (including designated data protection officers), and government institutions — are served through direct-access channels, accredited seminars for DPOs, teacher training programs, dedicated consultation phone lines, and co-organization of the national Kybersoutěž cybersecurity competition. Its primary outbound channels are its website (uoou.gov.cz), media appearances, and EDPB plenary participation.

Name

Úřad pro ochranu osobních údajů

Legal name

Úřad pro ochranu osobních údajů

Website

https://uoou.cz

Company type

Private

Founded year

2000

Operating status

Operating

Headcount range

11–50 employees

Short description

Úřad pro ochranu osobních údajů (ÚOOÚ) is the Czech Republic's independent data protection authority, supervising GDPR compliance, personal data handling, commercial communications, and freedom-of-information proceedings for citizens, businesses, and government institutions.

Ownership category

akta.pro rank

Product category

Data Protection Regulatory Services

NAICS

Regulation, Licensing, and Inspection of Miscellaneous Commercial Sectors (92615), Executive, Legislative, and Other General Government Support (921), Justice, Public Order, and Safety Activities (922)

SIC

Services-Legal Services (8111), Services-Computer Programming, Data Processing, Etc. (7370)

akta.pro primary industry

Data Protection, Privacy & Cybersecurity Regulators (BPAIAOAH)

akta.pro secondary industries

National Archives, Records & Information Governance (BPAIAAAG), Privacy Governance & Consent Management (HDADAIAI)

Keywords

• Data protection regulation
• GDPR compliance supervision
• Privacy enforcement authority
• Personal data oversight
• Regulatory inspections

Headquarters

HQ city

Prague

HQ country

Czechia

HQ region

Europe

Offices1 record

Markets served

GTM type

B2B

Offering type

Services

Cost components

Personnel, Operations, Technology or R&D, Marketing or Sales, Infrastructure

Distribution channels1 record

Marketing channels6 records

Core offering

The Office for Personal Data Protection of the Czech Republic (Úřad pro ochranu osobních údajů) is the independent national supervisory authority that monitors and enforces compliance with personal data protection legislation, including GDPR and Act No. 101/2000 Coll. It processes complaints, conducts inspections, issues binding opinions, supervises commercial electronic communications, handles freedom of information proceedings, and administers the ORG Information System as part of the Czech e-Government basic registries. Its services are provided free of charge to citizens, businesses, and public institutions operating in the Czech Republic.

Product overview

Úřad pro ochranu osobních údajů (ÚOOÚ) is the Czech Data Protection Authority — a government regulatory body, not a commercial product company. Its primary functions are supervisory oversight and enforcement of personal data protection (including GDPR compliance), processing complaints and petitions, conducting inspections, providing consultations, and managing the Informační systém ORG for e-Government. The institution offers public information services and an email newsletter subscription. The organizational structure includes a Chairman (Jiří Kaucký) and two Vice-Chairmen (Josef Mička and Petr Jäger) as of 2026.

Differentiator

Problem solved

Functional benefit

Products and services

• Informační systém ORG (ORG Information System) A government information system that manages source and agenda identifiers for natural persons, forming part of the basic registries functionality within the Czech e-Government framework and maintained by the Office for Personal Data Protection.

Segments3 records

Ideal customer profiles3 records

Technology focussed No

API detail

Has API

No

API docs

API detail

Core technology

AI maturity

App detail

Feature1 record

Partnerships

Seven partnerships are on record, tiered core, minor and major.

• European Data Protection Board (EDPB)coreStrategic or Co-development Partner · 25 May 2018European Data Protection Board replaced the Article 29 Working Party (WP29) following GDPR implementation. The Czech office actively participates in EDPB plenary sessions, contributing to EU-wide regulatory guidance and cooperation on cross-border data protection matters.
• Lichtenštejnský palác (Liechtenstein Palace)minorStrategic or Co-development Partner · 1 February 2018Co-organized the international conference 'GDPR and its Implementation into Everyday Practice of State Administration' held at the Liechtenstein Palace in Prague.
• Univerzita Karlova (Charles University), Právnická fakultaminorStrategic or Co-development Partner · 1 May 2016Co-organized the international conference 'Right to Information Self-Determination' with the Law Faculty of Charles University in May 2016.
• Bosnia and Herzegovina (Bosna a Hercegovina)majorStrategic or Co-development Partner · 1 January 2005The office served as main coordinator and professional guarantor for creating a new supervisory authority in Bosnia and Herzegovina. A significant portion of this project was implemented in 2006, helping establish a functionally operative data protection system.
• European CommissioncoreStrategic or Co-development Partner · 1 January 2004Active participation in WP29 activities during Czech EU Presidency in 2009. The office hosted the XIX. Case Handling Workshop and continues to collaborate with the Commission on GDPR implementation and enforcement.
• Council of Europe (Rada Evropy)coreStrategic or Co-development Partner · 1 September 2000Signed Council of Europe Convention No. 108 in September 2000, the first European document regulating the transfer of personal data. The office has since been involved in Council of Europe activities supporting data protection in countries including Russia, Bosnia and Herzegovina, and Cyprus.
• Various countries (Čína, Makedonie, Rumunsko, Gruzie, Albánie)minorStrategic or Co-development PartnerProvided consultations and shared experiences with supervisory authorities from countries where data protection issues were just beginning to be addressed.

Scale indicators5 records

Recent moves6 records

Expansion highlights5 records

Direct peers

• Datenschutzbehörde (Austrian DPA): Austrian data protection authority performing the same GDPR supervisory role as ÚOOÚ within Austria. Closest cultural and linguistic peer in the EU national DPA network.
• Bundesbeauftragter für den Datenschutz und die Informationsfreiheit (BfDI): German federal data protection commissioner performing identical supervisory functions over GDPR compliance in Germany. A direct functional peer with comparable jurisdiction, EDPB participation, and statutory independence — often a benchmark for national DPA effectiveness in the EU.
• Garante per la protezione dei dati personali: Italian data protection authority performing the same GDPR supervisory and enforcement functions as ÚOOÚ within Italy. Direct peer in mandate, EDPB participation, and institutional structure.
• Information Commissioner's Office (ICO): UK's independent data protection authority, equivalent to ÚOOÚ but now operating under the UK GDPR post-Brexit. Performs the same regulatory and enforcement functions and represents the closest functional peer from a common-law jurisdiction.
• Commission Nationale de l'Informatique et des Libertés (CNIL): French data protection authority supervising GDPR compliance in France. Operates the same regulatory mandate as the Czech ÚOOÚ — handling complaints, conducting inspections, imposing fines, and contributing to EDPB — but with substantially larger resources and broader influence as the lead supervisory authority for many multinational tech firms.
• Agencia Española de Protección de Datos (AEPD): Spanish data protection authority that awarded ÚOOÚ its 2007 European Prize. Performs identical GDPR supervisory functions in Spain and represents a direct peer in regulatory practice and EDPB cooperation.
• Autoriteit Persoonsgegevens (AP): Dutch data protection authority performing identical GDPR supervisory and enforcement functions in the Netherlands. Often cited as a benchmark DPA in the EU and a direct functional peer.
• National Authority for Data Protection and Freedom of Information (NAIH, Hungary): Hungarian data protection and freedom of information authority — notable peer because it combines both mandates now held by ÚOOÚ (data protection since 2000, freedom of information since 2020). Direct functional comparator.
• UODO (President of the Personal Data Protection Office, Poland): Polish data protection authority performing the same GDPR supervisory functions in Poland. Comparable Central European peer with similar institutional history and EDPB participation.
• Úrad na ochranu osobných údajov (Slovak DPA): Slovak data protection authority performing identical supervisory functions within Slovakia. The closest peer by shared historical institutional lineage from the former Czechoslovak data protection framework.

Market position

Strengths4 records

Weaknesses4 records

Competitive moat3 records

Key risks5 records

Key highlights6 records

Customer concentration

• LinkedInlinkedin.com/company/%C3%BA%C5%99ad-pro-ochranu-osobn%C3%ADch-%C3%BAdaj%C5%AF

Revenue estimate

Valuation estimate

Number of profiles

Profiles3 records

Funding overview

Funding rounds

Investors

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about Úřad pro ochranu osobních údajů