APDA Legal Texts

The Andorran Data Protection Agency, created in 2005, is a public body with its own legal personality, independent of public administrations and with full legal capacity. Its objective is to protect and guarantee, with regard to the processing and use of personal data, the fundamental rights of individuals, especially those relating to privacy.

The Andorran Data Protection Agency is an independent authority that acts objectively and independently of the Andorran public administrations in the exercise of its functions.

It is regulated by the following regulations:

Main legal texts:

  • Constitution of the Principality of Andorra, (BOPA No. 24, of 04-05-93) ( AC ) ( FR ) ( IS ) ( IN )
  • Law 12/2024, of July 15, qualified as an amendment to Law 29/2021, of October 28, qualified as a protection of personal data. ( AC )
  • Law 29/2021, of October 28, qualified as protection of personal data (BOPA No. 119, 11/17/2021) ( AC ) (ENTRY INTO FORCE MAY 2022)
  • Decree 368/2022, of 14-9-2022, approving the Regulations of the Andorran Data Protection Agency (BOPA no. 112, 21/09/2022) ( AC )
  • Decree 391/2022, of 28-9-2022, approving the Regulations for the implementation of Law 29-2021, of October 28, classified as the protection of personal data (BOPA No. 118, 05/10/2022) ( AC )
  • Convention for the protection of individuals with regard to automated processing of personal data, done in Strasbourg on 28 January 1981, and the Additional Protocol to the Convention for the protection of individuals with regard to automated processing of personal data relating to supervisory authorities and transborder data flows, done in Strasbourg on 8 November 2001, of 18-10-2007 ( AC )

Other legal texts:

  • Law 15/2003, of December 18, Qualified as Protection of Personal Data ( AC ) ( FR ) ( IS ) ( IN )
  • Decree of 9-06-2010 approving the Regulations of the Andorran Data Protection Agency. (BOPA No. 33, 16/06/2010) ( AC ) ( IS )
  • Correction of errata of 23-06-2010 correcting several errors found in the Decree of 9-06-2010 approving the Regulations of the Andorran Data Protection Agency. (BOPA No. 37, 30/06/2010) ( AC ) ( FR ) ( IS ) ( IN )
  • Decree of 1-7-2004 approving the Regulations of the public registry for the registration of personal data files. (BOPA No. 41, 7/07/2004) ( AC ) ( IN )
  • Decree of 1-10-2008 amending Annex 1 of the notification model for the registration of personal data files in the Public Registry of Registration of Personal Data Files ( AC )
  • Decree of 1-7-2004 on the creation of the personal data files of the Andorran Data Protection Agency (BOPA No. 41, 7/07/2004) ( AC )
  • Edict of 10-14-2021 appointing the head of the Andorran Data Protection Agency ( AC )( Correction of typo )
  • Edicts of 10-28-2021 appointing the inspectors of the Andorran Data Protection Agency ( AC ) and ( AC )
  • Edict of 13-5-2008 announcing that on 1 September 2008 the Convention for the protection of individuals with regard to automated processing of personal data, done in Strasbourg on 28 January 1981, and the Additional Protocol to the Convention for the protection of individuals with regard to automated processing of personal data relating to supervisory authorities and transborder data flows, done in Strasbourg on 8 November 2001, will enter into force ( AC )
  • Commission Decision of 19 October 2010 pursuant to Directive 95/46/EC of the European Parliament and of the Council on the adequate protection of personal data in Andorra, published in the Official Journal of the EU on 21 October 2010 ( FR ) ( IS ) ( IN ) ( OF )
  • Regulation of June 4, 1976, on the Public Sector Data Bank ( AC )