Supervisory Authority (Data Protection Authority)
An independent public authority responsible for monitoring and enforcing data protection laws.
A supervisory authority (also called a Data Protection Authority or DPA) is an independent public body established by an EU member state under GDPR Article 51. Each member state must have at least one supervisory authority. Their responsibilities include: monitoring and enforcing GDPR, promoting public awareness, advising on legislative measures, handling complaints, conducting investigations, imposing fines and sanctions, and cooperating with other supervisory authorities. Notable DPAs include: the Irish Data Protection Commission (DPC), the French CNIL, the German BfDI, the Italian Garante, and the Spanish AEPD. The European Data Protection Board (EDPB) coordinates between DPAs.