the spanish data protection agency is a public law entity with legal personality. it has full public and private capacity to act independently of public administration in the exercise of their functions. it ensures that the titulars of the files that contains personal information strictly follows the data protection legislation.