The Global Privacy Assembly (GPA) recognises the unprecedented challenges being faced to address the spread of Coronavirus (COVID-19).

Data protection authorities across the world stand ready to help facilitate swift and safe data sharing to fight COVID-19, while still providing the protections the public expects.

Below is the latest guidance and information from GPA members and observers on data protection and COVID-19. Further updates to follow.

Albania IDP
Guidelines on the protection of personal data in the context of the measures taken against COVID-19 [EN]
Andorra Data Protection Agency
Information on data protection and COVID-19 [CA]
Argentina Agencia de Acceso a la Información Pública
Tratamiento de datos personales ante el Coronavirus [ES]
Australia Office of the Australian Information Commissioner (OAIC)
Coronavirus (COVID-19): Understanding your privacy obligations to your staff – Agencies [EN]
Austria Austrian Data Protection Authority
Data Protection Authority Information on Coronavirus (Covid-19) [DE]
Bulgaria Commission for Personal Data Protection
КЗЛД въвежда противоепидемични мерки срещу разпространението на COVID-19 [BG]

Office of the Privacy Commissioner of Canada
Announcement: Commissioner issues guidance on privacy and the COVID-19 outbreak [EN]
Guidance: Privacy and the COVID-19 outbreak [EN]

Office of the Information and Privacy Commissioner of Alberta
Privacy in a Pandemic [EN]

Council of Europe (Observer) Joint Statement on the right to data protection in the context of the COVID-19 pandemic [EN][FR]
Czech Republic Office for Personal Data Protection
Ke zpracování osobních údajů v rámci opatření proti šíření koronaviru [CS]
European Data Protection Board (Observer) Statement of the EDPB Chair on the processing of personal data in the context of the COVID-19 outbreak [EN]
Finland Office of the Data Protection Ombudsman
Data protection and limiting the spread of coronavirus [EN]
France Commission Nationale de l’Informatique et des Libertés
Coronavirus (Covid-19) : les rappels de la CNIL sur la collecte de données personnelles [FR]
Georgia State Inspector’s Service
Statement of the State Inspector’s Service [EN]
Gibraltar Gibraltar Regulatory Authority
Data protection and Coronavirus: What you need to know [EN]

Office of the Federal Commissioner for Data Protection and Freedom of Information
DSK provides information on data protection and Coronavirus [DE]
German Data Protection Supervisory Authorities joint information paper on data protection and the Coronavirus pandemic [DE]

Mecklenburg–West Pomerania: Data Protection Commissioner (Landesbeauftragte für den Datenschutz Mecklenburg-Vorpommern)
Statement on Privacy and Coronavirus [DE]

Hong Kong Privacy Commissioner for Personal Data
The Use of Information on Social Media for Tracking Potential Carriers of COVID-19 [EN]
Response to media enquiry on privacy issues arising from COVID-19 [EN]
Privacy Commissioner Responds to Privacy Issues Arising from Mandatory Quarantine Measures and Provides Updates on Doxxing [EN]
Hungary Hungarian National Authority for Data Protection and Freedom of Information
Information on processing data related to the Coronavirus epidemic [EN]
Ireland Data Protection Commission
Data Protection and COVID-19 [EN]
Italy Data Protection Commission (Garante per la protezione dei dati personali)
Coronavirus and data protection [IT]
Israel Israeli Privacy Protection Authority
Guidelines on Privacy Aspects of the Coronavirus Epidemic (COVID-19) [EN]
Jersey Office of the Information Commissioner
Data Protection and Coronavirus [EN]
Lithuania State Data Protection Inspectorate
Personal Data Protection and Coronavirus COVID-19 [EN] [LT]
Luxembourg National Commission for Data Protection
Coronavirus (COVID-19): recommendations by the CNPD on the processing of personal data in the context of a health crisis [EN] [FR]

National Institute for Transparency, Access to Information and Personal Data Protection (INAI)
Statement – Ante casos de COVID-19, INAI emite recomendaciones para tratamiento de datos personales [ES]
Statement – Suspende INAI eventos públicos, por recomendación de la SSA para evitar contagio de COVID-19 [ES]
Statement – Adoptará INAI como medida de prevención el trabajo a distancia ante COVID-19 [ES]

Transparency, Public Information Access and Personal Data Protection Institute of Estado de México and Municipalities (Infoem)
Recomendaciones respecto a la garantía de los derechos de protección de datos personales y acceso a la información pública, ante brote de COVID-19 [ES]

Netherlands Data Protection Commission (Autoriteit Persoonsgegevens)
Statement – AP geeft organisaties meer tijd vanwege coronacrisis [NL]
FAQs on testing employees for Coronavirus (Corona op de werkvloer) [NL]
FAQs on working from home (Veilig thuiswerken tijdens corona) [NL]
New Zealand Office of the Privacy Commissioner
Covid-19 and privacy FAQs [EN]
Perú Autoridad Nacional de Protección de Datos Personales del Perú
Divulgar datos personales de pacientes con coronavirus puede ser multado hasta con 215 mil soles [ES]
Philippines National Privacy Commission
Data protection in times of Emergency [EN]
Protecting personal data in the time of COVID-19 [EN]
Poland Personal Data Protection Office of Poland
Statement by the President of the Personal Data Protection Office on coronavirus [EN]
San Marino Autorità Garante per la protezione dei dati personali
Public announcement on COVID-19 emergency [EN] [IT]
Slovakia Office for Personal Data Protection of the Slovak Republic
Statement of the EDPB Chair on the processing of personal data in the context of the COVID-19 outbreak [SK]
Coronavirus and processing of personal data [SK]

Catalan Data Protection Authority
Statement regarding the processing of personal data related to the measures to deal with COVID-19 [CA][EN]

Spanish Data Protection Agency (Agencia Española de Protección de Datos)
Report from the State Legal Service Department (the Spanish DPA) on Processing Activities Relating to the Obligation for Controllers from Private Companies and Public Administrations to Report on Workers Suffering from Covid-19 [EN][ES]
Covid-19 FAQs [ES]
Statement – La AEPD publica un informe sobre los tratamientos de datos en relación con el COVID-19 [ES]
Statement – Comunicado de la AEPD en relación con webs y apps que ofrecen autoevaluaciones y consejos sobre el Coronavirus[ES]
Statement – Campañas de phishing sobre el COVID-19 [ES]

Switzerland Federal Data Protection and Information Commissioner (FDPIC)
Data protection legal framework for the containment of the coronavirus [EN][DE][FR][IT]
United Kingdom Information Commissioner’s Office (ICO)
Information hub on data protection and coronavirus [EN]
United Nations Special Rapporteurs COVID-19: States should not abuse emergency measures to suppress human rights – UN experts [EN]
United States of America Federal Trade Commission (FTC)
FTC, FDA Send Warning Letters to Seven Companies about Unsupported Claims that Products Can Treat or Prevent Coronavirus [EN]
Coronavirus Scams: What the FTC is Doing [EN]