# Definitions 4(22) — GDPR — provision context

> Focused context for a single provision (4(22)), curated from overview.legal on 2026-08-22. Canonical: https://overview.legal/laws/gdpr/art-4#par-22
> Verify against the official text (EUR-Lex / wetten.overheid.nl) before relying on it.

Part of **Definitions** (GDPR, full article: https://overview.legal/laws/gdpr/art-4).

## Provision text

### 4(22)

‘supervisory authority concerned’ means a supervisory authority which is concerned by the processing of personal data because:

a) the controller or processor is established on the territory of the Member State of that supervisory authority;
b) data subjects residing in the Member State of that supervisory authority are substantially affected or likely to be substantially affected by the processing; or
c) a complaint has been lodged with that supervisory authority;

## Topics on this provision

- **Supervisory Authorities** — https://overview.legal/topics/supervisory-authorities
  National data protection authorities and their powers
- **Supervision** — https://overview.legal/topics/toezicht
  Oversight and enforcement by supervisory authorities
- **Personal Data** — https://overview.legal/topics/persoonsgegevens
  Information relating to identified or identifiable natural persons
- **Processing** — https://overview.legal/topics/verwerking
  Any operation performed on personal data

## Cited by (exact-provision citations)

- **Opinion 8/2019 on the competence of a supervisory authority in case of a change in circumstances relating to the main or single establishment** (guidance) — https://overview.legal/posts/126208
- **Guidelines 1/2019 on Codes of Conduct and Monitoring Bodies under Regulation 2016/679** (guidance) — https://overview.legal/posts/38051
- **Guidelines 02/2022 on the application of Article 60 GDPR** (guidance) — https://overview.legal/posts/38066
- **Guidelines 8/2022 on identifying a controller or processor's lead supervisory authority** (guidance) — https://overview.legal/posts/38046
- **Guidelines 03/2021 on the application of Article 65(1)(a) GDPR** (guidance) — https://overview.legal/posts/38137
- **Opinion 8/2019 on the competence of a supervisory authority in case of a change in circumstances relating to the main or single establishment** §31 (guidance, EDPB) — https://overview.legal/posts/126208
- **Opinion 8/2019 on the competence of a supervisory authority in case of a change in circumstances relating to the main or single establishment** §28 (guidance, EDPB) — https://overview.legal/posts/126208
- **Opinion 8/2019 on the competence of a supervisory authority in case of a change in circumstances relating to the main or single establishment** §24 (guidance, EDPB) — https://overview.legal/posts/126208
- **Guidelines 02/2022 on the application of Article 60 GDPR** §253 (guidance, EDPB) — https://overview.legal/posts/38066
- **Guidelines 02/2022 on the application of Article 60 GDPR** §18 (guidance, EDPB) — https://overview.legal/posts/38066
- **Guidelines 8/2022 on identifying a controller or processor's lead supervisory authority** §42 (guidance, EDPB) — https://overview.legal/posts/38046
- **Opinion 8/2019 on the competence of a supervisory authority in case of a change in circumstances relating to the main or single establishment** §34 (guidance, EDPB) — https://overview.legal/posts/126208

---
Generated by overview.legal · https://overview.legal/laws/gdpr/art-4#par-22 · 2026-08-22