Agencia Española de Protección de Datos

What Agencia Española de Protección de Datos does

Agencia Española de Protección de Datos (AEPD) is the Spanish Data Protection Authority, established in 1993 as an independent public agency under the Government of Spain and headquartered in Madrid (Paseo de la Castellana, 141 since July 2025). Its mandate is to enforce the General Data Protection Regulation (GDPR) and Spain's national data protection law (Ley Orgánica 3/2018, LOPDGDD), supervise personal data processing, handle complaints, issue binding legal criteria, and represent Spain at the European Data Protection Board (EDPB) and in the Ibero-American Network of Personal Data Protection.

AEPD's service portfolio is structured around citizen-facing and organization-facing channels: the Sede Electrónica for online procedures, the Canal Prioritario for urgent removal of illicit content, in-person registry and citizen attention, and a suite of free compliance tools (Gestiona RGPD, Facilita RGPD, Facilita EMPRENDE, Asesora Brecha, Comunica-Brecha RGPD, ValidaCripto RGPD). Beyond enforcement, it operates the Laboratorio de Privacidad AEPD, a research platform with a network of 107 registered research groups, and publishes the 'Privacidad, Innovación y Tecnología' scientific journal focused on privacy and emerging technologies, particularly artificial intelligence.

As a Spanish government agency, AEPD does not generate commercial revenue. Services are provided free of charge to citizens, businesses, and public administrations, and the agency is funded through the Spanish national budget. Its go-to-market is institutional rather than commercial, with 51-100 employees handling a 2025 caseload of more than 30,000 claims (a 64% YoY increase) and publishing over 1,500 legal reports. Strategic direction is set by the Strategic Plan 2025-2030 under the presidency of Lorenzo Cotino, with emphasis on responsible innovation and AI governance.

Name

Agencia Española de Protección de Datos

Legal name

Agencia Española de Protección de Datos (AEPD)

Website

https://aepd.es

Company type

Public

Founded year

1993

Operating status

Operating

Headcount range

51–100 employees

Short description

The Agencia Española de Protección de Datos (AEPD) is Spain's independent data protection authority, enforcing GDPR and LOPDGDD, handling complaints, issuing binding guidance, and operating free compliance tools for citizens, businesses, and public administrations.

Ownership category

akta.pro rank

Product category

Data Protection Regulatory Authority

NAICS

Public Administration (92), Regulation, Licensing, and Inspection of Miscellaneous Commercial Sectors (92615)

SIC

International Affairs (9721)

akta.pro primary industry

Privacy Governance & Consent Management (HDADAIAI)

Keywords

• Data protection regulation
• GDPR compliance enforcement
• Privacy rights oversight
• AI governance authority
• Data breach notification

Headquarters

HQ city

Talamanca De Jarama

HQ country

Spain

HQ region

Europe

Offices3 records

Markets served

GTM type

B2B

Offering type

Services

Cost components

Personnel, Operations, Technology or R&D, Infrastructure, Others

Distribution channels5 records

Marketing channels8 records

Core offering

Agencia Española de Protección de Datos (AEPD) is the Spanish independent supervisory authority for data protection, enforcing GDPR and the Spanish LOPDGDD across Spain. It processes complaints and claims, issues binding legal criteria and sanctions, supervises large-scale data processing systems, and provides free compliance tools, a priority channel for urgent content removal, and the Laboratorio de Privacidad for research on privacy and emerging technologies. It also represents Spain in the European Data Protection Board and the Ibero-American Network of Personal Data Protection.

Product overview

Agencia Española de Protección de Datos (AEPD) is Spain's data protection authority that provides regulatory oversight and compliance support tools rather than a commercial product portfolio. Its offerings include the electronic office (Sede Electrónica) for administrative procedures, multiple compliance tools (Facilita RGPD, Asesora Brecha, Gestiona RGPD, Comunica-Brecha RGPD, ValidaCripto RGPD, Facilita EMPRENDE) to help organizations meet GDPR requirements, a priority channel for reporting harmful content, the Privacy Laboratory for research on emerging technologies, and a scientific journal on privacy and innovation.

Differentiator

Problem solved

Functional benefit

Brands

• Laboratorio de Privacidad AEPD: A new dedicated space for knowledge generation, prospective analysis and specialized collaboration around privacy, data protection and emerging technologies.

Products and services

• Gestiona RGPD Platform for managing GDPR compliance, enabling organizations to oversee their data processing activities and documentation.
• Facilita RGPD Self-assessment tool to help small and medium-sized enterprises and freelancers comply with the General Data Protection Regulation (RGPD) requirements.
• Facilita EMPRENDE Tool to facilitate GDPR compliance for entrepreneurs and startups, providing simplified procedures for new businesses.
• Canal Prioritario Priority channel for requesting immediate removal of sexually explicit or violent content published online that poses serious risks to the rights and freedoms of affected persons.
• Comunica-Brecha RGPD Tool for reporting personal data breaches to the authority as required under the GDPR.
• Asesora Brecha Tool to assist organizations in managing and responding to personal data breaches, including assessment and notification procedures.
• ValidaCripto RGPD Tool to validate cryptographic compliance and secure use of encryption in relation to GDPR requirements.
• Sede Electrónica AEPD Electronic office platform providing online procedures, forms, and administrative services for citizens and organizations to interact with the data protection authority (sedeaepd.gob.es).
• Laboratorio de Privacidad AEPD Digital space dedicated to knowledge generation, prospective analysis, and specialized collaboration on privacy, data protection, and emerging technologies including AI.
• Revista de Privacidad, Innovación y Tecnología Scientific journal publishing research and analysis on privacy, data protection, technology, and the impact of artificial intelligence on fundamental rights.

Quantifiable outcome

• Received more than 30,000 claims in 2025 (64% increase)
• +1 more outcomes

Segments4 records

Ideal customer profiles4 records

Technology focussed Yes

API detail

Has API

No

API docs

API detail

Core technology

AI maturity

App detail

AI capability4 records

Feature10 records

Partnerships

Seven partnerships are on record, tiered core and minor.

• Comité Europeo de Protección de Datos (EDPB)coreStrategic or Co-development PartnerAEPD participates as the Spanish representative in the European Data Protection Board, coordinating with other EU supervisory authorities on data protection matters, issuing guidelines, and ensuring consistent application of GDPR across member states.
• Red Iberoamericana de Protección de Datos PersonalescoreStrategic or Co-development PartnerAEPD collaborates with the Ibero-American Network of Personal Data Protection, which includes data protection authorities from Spanish and Portuguese-speaking countries. Activities include updating common privacy frameworks, issuing reference documents on neurodata and AI, and promoting regional cooperation.
• Autoridad Belga de Protección de DatoscoreStrategic or Co-development PartnerAEPD and the Belgian Data Protection Authority jointly promote good data protection practices for the video game sector, collaborating on guidance and regulatory approaches for this industry.
• Comisión Nacional de los Mercados y la Competencia (CNMC)coreStrategic or Co-development PartnerAEPD and CNMC reinforced their collaboration to protect citizens' rights in the digital environment, coordinating oversight of digital markets and competition matters affecting data protection.
• European Digital Rights (EDRi)minorStrategic or Co-development PartnerAEPD maintains institutional meetings with European Digital Rights, an international association of organizations defending privacy and digital rights, to discuss policy positions and regulatory approaches.
• Universidade da CoruñaminorStrategic or Co-development PartnerAEPD and the University of A Coruña jointly organize a summer course on corporate governance, risk management, AI and regulatory compliance, promoting education and research in data protection.
• Agencia Española de Supervisión de la Inteligencia Artificial (AESIA)coreStrategic or Co-development PartnerAEPD participates in the second meeting of the Advisory Committee of the AI Ideas Laboratory of AESIA, coordinating on AI governance and supervision approaches in Spain.

Scale indicators4 records

Recent moves7 records

Expansion highlights4 records

Direct peers

• Bundesbeauftragte für den Datenschutz und die Informationsfreiheit (BfDI): Germany's federal data protection commissioner. A direct EDPB peer operating under the same GDPR framework as AEPD, with parallel functions in enforcement, guidance issuance, and international coordination.
• Garante per la protezione dei dati personali: Italy's data protection authority. A direct EDPB peer performing the same GDPR supervisory functions as AEPD, with comparable publication of legal guidance, complaint processing, and SME-facing compliance tools.
• Autoriteit Gegevensbescherming (Autoriteit Belga): Belgium's data protection authority. AEPD specifically collaborates with this peer on video game industry best practices, demonstrating functional equivalence and ongoing bilateral cooperation.
• Information Commissioner's Office (ICO): The UK's data protection authority. Despite post-Brexit status, ICO remains functionally equivalent to AEPD in scope (GDPR-UK GDPR enforcement, complaint handling, guidance production) and is a recognized peer in EDPB-adjacent forums.
• Commission Nationale de l'Informatique et des Libertés (CNIL): France's national data protection authority, the AEPD's most direct EDPB counterpart. CNIL performs identical functions (GDPR enforcement, guidance issuance, complaint handling) in a comparable legal and institutional context, making it the closest peer in scope, mandate, and tools offered.
• Autoriteit Persoonsgegevens (AP): The Dutch data protection authority. A direct EU peer of AEPD, performing identical GDPR supervisory functions including enforcement, guideline publication, and SME compliance tool distribution.

Others

• OneTrust: Major private-sector privacy management platform serving the same organizational customers (GDPR compliance, consent management, DSR handling) that AEPD regulates. Adjacent rather than competitive, since AEPD is a regulator and OneTrust is a vendor in the regulated market.
• European Data Protection Board (EDPB): The EU-level body that coordinates national DPAs including AEPD. EDPB is a governance peer and the institutional forum where AEPD contributes binding decisions and guidelines on cross-border data protection matters.
• Red Iberoamericana de Protección de Datos Personales: Ibero-American network of data protection authorities. AEPD participates as Spanish representative and has contributed to common frameworks on neurodata and AI; the network functions as a peer coordination ecosystem rather than a competitor.

Emerging players

• Agencia Española de Supervisión de la Inteligencia Artificial (AESIA): Spain's national AI supervision agency. AEPD participates in AESIA's Advisory Committee and AI Ideas Laboratory; AESIA represents a peer regulator whose emerging AI-specific mandate overlaps with AEPD's AI governance guidance work.

Market position

Strengths4 records

Weaknesses4 records

Competitive moat4 records

Key risks5 records

Key highlights7 records

Customer concentration

• Xx.com/aepd_es
• YouTubeyoutube.com/channel/UCdKb1SWpT_D0bdqd-9BwLBw
• LinkedInlinkedin.com/company/aepd-es
• Instagraminstagram.com/aepd.es

Compliance1 record

Revenue estimate

Valuation estimate

Number of profiles

Profiles2 records

Funding overview

Funding rounds

Investors

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about Agencia Española de Protección de Datos