ETHICA Compliance

Regulatory Resources

Selected official data protection authorities, regulatory bodies and legislative resources relevant to privacy, life sciences and clinical research in the EEA and the United Kingdom. Use the links below to access primary sources and current guidance.

Data protection authorities

European & UK bodies

Legislation & guidance

Scope and limitations

External resources
Links lead to third-party official websites. Content, availability and interpretation may change. Ethica is not affiliated with, sponsored by or endorsed by the organisations listed.
Competent authority
The listed national bodies are starting points, not always the sole competent supervisory authorities. In particular, Germany has federal and Länder authorities; Austria and Belgium also have divided competences. Check applicable national or regional jurisdiction before lodging a complaint or notification.
Legal status
This directory is not legal advice. Always consult the current consolidated legislative text, applicable national law and the relevant competent authority. The UK Data (Use and Access) Act 2025 amends, but does not replace, UK GDPR or the Data Protection Act 2018.
Clinical trial scope
CTIS and EudraLex resources relate to medicinal-product clinical trials; medical devices and other research may be subject to different regulatory frameworks. National ethics and trial-authorisation requirements may also apply.

Last reviewed: 8 November 2026.

Discuss your data protection needs

Whether you need corporate privacy support, help with a specific project or specialist input on a complex data protection matter, we can discuss the approach that fits your organisation.

Not sure which data protection or privacy requirements apply to your activities?

Book a complimentary discovery call