CYSTAT is designated by law as the competent authority for the development, production and dissemination of official statistics in Cyprus. This gives CYSTAT the right to access data.

For all statistical units for which CYSTAT stores data, including personal data, statistical confidentiality, which is a fundamental, irrevocable principle for CYSTAT, is strictly applied. The internal procedures implemented in the framework of statistical confidentiality, fully cover the provisions of the General Data Protection Regulation (EU) 2016/679 (GDPR), ensuring the protection of data at every stage, from collection to publication.

In compliance with the provisions of the GDPR, CYSTAT has appointed a Data Protection Officer, whom citizens can contact regarding any issue concerning their personal data processed by CYSTAT as a "controller".