Belgian DPA 2018 Copilot
Belgium's national data protection act alongside the GDPR
What the Belgian DPA 2018 Copilot Can Do
Understand what the Belgian act adds to the directly applicable GDPR
Navigate the role and powers of the Gegevensbeschermingsautoriteit (APD)
Handle prior consultation and the Belgian DPO advice routes
Work processor and controller duties in the Belgian legal context
Align records, DPIAs, and breach handling with Belgian practice
Connect the act to NIS 2 Belgium and CyberFundamentals duties
About Belgian DPA 2018 Copilot
The Belgian Data Protection Act of 30 July 2018 (WBP; in French, LPVP), the law regulating the protection of natural persons with regard to the processing of personal data, completes and specifies the GDPR for processing in Belgium. It works alongside the Gegevensbeschermingsautoriteit (APD), the supervisory authority established by the separate Act of 3 December 2017, and adds Belgian particularities on top of the GDPR's direct rules. The Belgian DPA Copilot helps you interpret how the act qualifies GDPR obligations for Belgian processing and when the national route applies.
Cross-framework mappings
Working across Belgian DPA 2018 and another standard? ISMS Mappings is a free public directory of control maps (ISO 27001, SOC 2, NIST, GDPR, and more). A Better ISMS tool, separate from the chat assistant.
Browse free mappingsFrequently Asked Questions
What is the Belgian DPA 2018?
It is Belgium's national data protection act of 30 July 2018, which implements and specifies the GDPR for Belgium. Where the GDPR leaves openings for national law, such as specific processing situations and the supervisory framework, the act fills them in for Belgian controllers and processors.
Does the GDPR still apply directly in Belgium?
Yes. The GDPR applies directly and prevails; the Belgian act complements it. In practice you work both together: GDPR rules as the base layer, national specifications where the act applies them.
Which authority enforces it?
The Gegevensbeschermingsautoriteit, also called the Autorite de protection des donnees (APD), Belgium's independent supervisory authority for data protection. It was established by the Act of 3 December 2017; the 2018 act works within the framework that authority enforces.
Ready to do compliance work faster?
Built for speed, accuracy, and audit-ready output.