🇦🇩
Andorra
Qualified Law 29/2021 on Personal Data Protection
Europe🟢 Comprehensive
Compliance Score
50%
7 Addressed
6 Partial
1 None
Authority
Andorran Data Protection Agency (APDA)
Overview
Andorra's Qualified Law 29/2021 establishes personal-data processing rules and individual rights, with the APDA supervising compliance. Specific obligations depend on the processing context and applicable implementing rules.
14-Topic Coverage Analysis
Data Protection Authority
AddressedConsent Requirements
AddressedData Subject Rights
AddressedCross-Border Transfer
AddressedBreach Notification
AddressedDPO Requirements
PartialChildren's Data
AddressedPenalties & Enforcement
AddressedSector-Specific Rules
PartialCookie/Tracking
PartialAI & Automated Decisions
PartialData Localisation
PartialSignificant Data Fiduciary
NoneGovernment Data
Partial? Frequently Asked Questions
What is the primary data protection law in Andorra?+
Andorra is governed by the Qualified Law 29/2021 on Personal Data Protection. The law is enforced by the Andorran Data Protection Agency (APDA). According to our analysis, the country has a Comprehensive level of data protection framework.
Does Andorra require a Data Protection Officer (DPO)?+
Partially. The Qualified Law 29/2021 on Personal Data Protection may require a DPO only for specific high-risk organizations or sectors. It is not universally mandatory for all businesses.
What are the data localisation rules in Andorra?+
Partially. While Qualified Law 29/2021 on Personal Data Protection may not mandate general localisation, specific sectoral laws (like finance or health) might require data to be stored locally.
What are the breach notification requirements in Andorra?+
Under the Qualified Law 29/2021 on Personal Data Protection, organizations must notify the Andorran Data Protection Agency (APDA) and affected individuals without undue delay in the event of a personal data breach.