Chapter 6. Independent Supervisory Authorities (Articles 51-59)

Requires that each Member State have a competent supervisory authority with certain tasks and powers.

Section 1 – Independent Status

Article 51 – Supervisory authority

Each Member state has to supply at least one independent public authority to enforce this regulation.

Article 52 – Independence

Each supervisory authority has to act with complete independence, and its members have to remain free from external influence.

Article 53 – General conditions for the members of the supervisory authority

Member states need to appoint members of the supervisory authority in a transparent way, and each member must be qualified.

Article 54 – Rules on the establishment of the supervisory authority

Each Member State needs to provide, in law, the establishment of each supervisory authority, qualifications for members, rules for appointment, etc.

Section 2 – Competence, Tasks, and Powers

Article 55 – Competence

Each supervisory authority must be competent to perform the tasks in this Regulation.

Article 56 – Competence of the lead supervisory authority

The supervisory authority of a controller or processor that is doing cross-border processing will be the lead supervisory authority.

Article 57 – Tasks

In its territory, each supervisory authority will monitor and enforce this Regulation, promote public awareness, advise the national government, provide information to data subjects, etc.

Article 58 – Powers

Each supervisory will have investigative, corrective, authorization, and advisory powers.

Article 59 – Activity reports

Each supervisory authority must write an annual report on its activities.

References

• GDPR Home

• GDPR Chapters

• GDPR Recitals

• GDPR Key Issues