Print

Private organisation

Data protection supervision over private organisations such as companies is carried out by national data protection authorities. All EU Member States have at least one such authority.

You can also take up your complaint with the courts in the relevant Member State.

The EDPS is not competent for complaints against such private organisations; we can therefore only refer you to the relevant national authorities.

The competent data protection authority is usually the one of the country where the organisation has its EU headquarters. For cross-border cases (example: you're in Sweden and receive spam from a Cypriot company) you can also contact the local data protection authority of your home country for them to coordinate with the data protection authority competent as lead authority for the company or other organisation.

You can find contact details for the national data protection authorities of the EU Member States on the website of the European Data Protection Board. In case there are multiple data protection authorities in a Member State, their websites can help you in identifying which one will be best-placed to help you.

For the contact details of more data protection authorities worldwide, please see the list of members of the International Conference of Data Protection & Privacy Commissioners.