The Spanish Data Protection Agency (AEPD, Spanish: Agencia Española de Protección de Datos) is an independent agency of the government of Spain which oversees the compliance with the legal provisions on the protection of personal data.

The AEPD was established by Royal Decree 428/1993 of 26 March, as amended by Organic Act 15/1999 on the Protection of Personal Data.

[1] The agency was created in the context of the Spanish Constitution of 1978, Article 18.4, stating that "the law shall restrict the use of informatics in order to protect the honour and the personal and family privacy of Spanish citizens, as well as the full exercise of their rights" as elaborated by Organic Law 5/1992.

[4][5] The AEPD has come into conflict with Google over information gathered from Wi-Fi networks as Google Street View images were taken, asserting that "it has been verified that data on the location of wifi networks, with the identification of their owners, and personal data of a diverse nature in communications, such as names and surnames, messages associated with such accounts and message services, or user codes or passwords" had been collected.

[6][7] It has also demanded the removal of approximately 90 names from search results, claiming a "right to be forgotten".