The regulatory bodies

The EU lead supervisory authorities have a range of duties around information privacy.  Some of these include education, advisory, investigation and corrective action.

A current list of all EU lead supervisory authorities can be found here

For the UK the supervisory authority is the Information Commissioner’s Office,


“The ICO is the UK’s independent body set up to uphold information rights.”

Identifying a lead supervisory authority for organisations depends on determining the location of the controller’s ‘main establishment’ or ‘single establishment’ in the EU.

The following guidance document will help:

Download & view (PDF): Guidelines for identifying a controller or processor’s lead supervisory authority