# Challenge to the competence of notified bodies — AI Act — context bundle > Focused context for a single provision, curated from overview.legal on 2026-08-22. Canonical page: https://overview.legal/laws/ai-act/art-37 > Every item cites its source. Verify against the official text (EUR-Lex / wetten.overheid.nl) before relying on it. ## Provision ### Challenge to the competence of notified bodies — Challenge to the competence of notified bodies *AI Act, aiact-art-37-en — https://overview.legal/laws/ai-act/art-37* 1. The Commission shall, where necessary, investigate all cases where there are reasons to doubt the competence of a notified body or the continued fulfilment by a notified body of the requirements laid down in Article 31 and of its applicable responsibilities. 2. The notifying authority shall provide the Commission, on request, with all relevant information relating to the notification or the maintenance of the competence of the notified body concerned. 3. The Commission shall ensure that all sensitive information obtained in the course of its investigations pursuant to this Article is treated confidentially in accordance with Article 78. 4. Where the Commission ascertains that a notified body does not meet or no longer meets the requirements for its notification, it shall inform the notifying Member State accordingly and request it to take the necessary corrective measures, including the suspension or withdrawal of the notification if necessary. Where the Member State fails to take the necessary corrective measures, the Commission may, by means of an implementing act, suspend, restrict or withdraw the designation. That implementing act shall be adopted in accordance with the examination procedure referred to in Article 98(2). ## Guidance ### Versiegeschiedenis *EDPB — https://overview.legal/posts/38090* Het Europees Comité voor gegevensbescherming (EDPB) heeft versie 2.0 van de richtsnoeren 2/2020 vastgesteld op 15 december 2020, na een openbare raadpleging. De richtsnoeren betreffen de toepassing van artikel 46, lid 2, onder a), en lid 3, onder b), van de GDPR inzake passende waarborgen voor doorgiften van persoonsgegevens tussen overheidsinstanties binnen en buiten de EER, waaronder wettelijk bindende instrumenten en bestuurlijke regelingen. Het document biedt interpretatieve leidraad over de vereiste waarborgen, zoals beginselen voor gegevensbescherming, rechtsmiddelen voor betrokkenen en toezichtmechanismen, zonder een boete op te leggen. ### Versiegeschiedenis *EDPB — https://overview.legal/posts/38126* De EDPB heeft in Richtsnoeren 06/2022 (vastgesteld op 12 mei 2022, na een interne versie van 18 november 2021) richtsnoeren opgesteld over het gebruik van minnelijke schikkingen door toezichthoudende autoriteiten (TA's) binnen de AVG, waarbij bijzondere aandacht uitgaat naar de procedurele aspecten in de context van het éénloketsysteem. De richtsnoeren beogen een consistente toepassing van het instrument van de minnelijke schikking across de lidstaten te bevorderen, gelet op de uiteenlopende nationale wetgevingen en de beperkte regulering van minnelijke schikkingen in de AVG zelf (uitsluitend overw. 131 en art. 56 lid 2). Het document biedt zowel een juridische analyse van de bevoegdheid en procedure voor het treffen van minnelijke schikkingen als praktische aanbevelingen, waaronder de toepassing van beginselen van behoorlijk bestuur en de samenwerkingsprocedure na een door een leidende TA getroffen schikking. ### Information Note on the Data Privacy Framework redress mechanism for national security purposes *EDPB — https://overview.legal/posts/125754* 1 Information Note on the redress mechanism for EU/EEA individuals in relation to alleged violations of U.S. law with respect to their data collected by U.S authorities competent for national security 2 Context about complaints on government access by U.S. intelligence authorities On 10 July 2023, the European Commission adopted its Implementing Decision C(2023) 4745 on the adequate level of protection of personal data under the EU-U.S. Data Privacy Framework ( ‘DPF Adequacy decision ’ ) 1 . An… ### Guidelines 03/2021 on the application of Article 65(1)(a) GDPR *EDPB — https://overview.legal/posts/38137* The European Data Protection Board (EDPB) adopted Guidelines 03/2021 to clarify the dispute resolution mechanism under Article 65(1)(a) GDPR, which governs the EDPB's authority to issue binding decisions when a Lead Supervisory Authority receives relevant and reasoned objections from Concerned Supervisory Authorities that it does not follow. The Guidelines address the procedural framework, the threshold for "relevant and reasoned" objections, the scope of the EDPB's substantive competence, and applicable procedural safeguards including the right to be heard, access to the file, and available judicial remedies. ### Guidelines 06/2022 on the practical implementation of amicable settlements *EDPB — https://overview.legal/posts/38072* The EDPB adopted Guidelines 06/2022 to provide practical guidance on the implementation of amicable settlements between supervisory authorities and controllers or processors under the GDPR. The guidelines address the scope and definition of amicable settlements, the legal basis for this power, and its procedural operation within the one-stop-shop mechanism, including the roles of the complaint-receiving competent supervisory authority and the lead supervisory authority. No fines are imposed as this is a guidance document rather than an enforcement decision. ## Related topics - **Notified Bodies for AI Systems** — https://overview.legal/topics/notified-bodies-ai ## Legal Framework - **Notified Body Competence Challenges and Dispute Resolution** — https://overview.legal/topics/notified-body-competence-challenges ## Legal Framework --- Generated by overview.legal · https://overview.legal/laws/ai-act/art-37 · 2026-08-22