GDPR Art. 55 EN
LLM context A cited markdown file you can paste into your AI assistant (ChatGPT, Claude, a RAG or project knowledge base) to ground it in this article. Contains: the article text, related recitals, cases citing it, enforcement stats and top fines, guidance, and related topics. Everything links back to its source on overview.legal — legal information, not advice.

Competence

Supervision Supervisory Authorities
In force — consolidated2016-05-04 · CELEX 02016R0679-20160504 · ELI ↗
Version history 2
  • 2016-05-04in force CELEX 02016R0679-20160504
  • 2016-04-27 CELEX 32016R0679
  1. 1.

    Each supervisory authority shall be competent for the performance of the tasks assigned to and the exercise of the powers conferred on it in accordance with this Regulation on the territory of its own Member State.

    Supervisory Authorities Supervision 40
  2. 2.

    Where processing is carried out by public authorities or private bodies acting on the basis of point (c) or (e) of Article 6(1), the supervisory authority of the Member State concerned shall be competent. In such cases Article 56 does not apply.

    Supervisory Authorities Supervision 1
  3. 3.

    Supervisory authorities shall not be competent to supervise processing operations of courts acting in their judicial capacity.

    Supervision 22

Enforcement

Cited in 5 fines totalling €132K

Top authority: 🇬🇷HDPA (Greece) (2) · median fine €66,000 · see all enforcement for Art. 55 →

Connections by provision

55(1) 36 Case Law 4 Guidance .md
Case Law 36
Meta Platforms and Others v Bundeskartellamt Meta Platforms v noyb Data Protection Commissioner v Facebook Ireland and Maximillian Schrems Judgment of the Court (Grand Chamber) of 16 January 2024.#Österreichische Datenschutzbehörde v WK.#Request for a preliminary ruling from the Verwaltungsgerichtshof.#Reference for a preliminary ruling – Protection of natural persons with regard to the processing of personal data – Article 16 TFEU – Regulation (EU) 2016/679 – Article 2(2)(a) – Scope – Exclusions – Activities which fall outside the scope of Union law – Article 4(2) TEU – Activities concerning national security – Committee of inquir Judgment of the Court (Grand Chamber) of 15 June 2021.#Facebook Ireland Ltd and Others v Gegevensbeschermingsautoriteit.#Request for a preliminary ruling from the Hof van beroep te Brussel.#Reference for a preliminary ruling – Protection of natural persons with regard to the processing of personal data – Charter of Fundamental Rights of the European Union – Articles 7, 8 and 47 – Regulation (EU) 2016/679 – Cross-border processing of personal data – ‘One-stop shop’ mechanism – Sincere and effecti Judgment of the Court (Fourth Chamber) of 7 March 2024.#IAB Europe v Gegevensbeschermingsautoriteit.#Request for a preliminary ruling from the Hof van beroep te Brussel.#Reference for a preliminary ruling – Protection of natural persons with regard to the processing of personal data – Regulation (EU) 2016/679 – Standard-setting sectoral organisation proposing to its members rules on the processing of users’ consent – Article 4(1) – Concept of ‘personal data’ – String of letters and characters ca Judgment of the Court (Grand Chamber) of 20 September 2022.#Bundesrepublik Deutschland v SpaceNet AG and Telekom Deutschland GmbH.#Requests for a preliminary ruling from the Bundesverwaltungsgericht.#Reference for a preliminary ruling – Processing of personal data in the electronic communications sector – Confidentiality of communications – Providers of electronic communications services – General and indiscriminate retention of traffic and location data – Directive 2002/58/EC – Article 15(1) – Judgment of the Court (Third Chamber) of 28 November 2024.#Nemzeti Adatvédelmi és Információszabadság Hatóság v UC.#Request for a preliminary ruling from the Kúria.#Reference for a preliminary ruling – Protection of natural persons with regard to the processing of personal data and the free movement of such data – Regulation (EU) 2016/679 – Data processed when drawing up a COVID-19 certificate – Data not collected from the data subject – Information to be provided – Exception to the obligation t +28 more
Guidance 4
Guidelines 1/2019 on Codes of Conduct and Monitoring Bodies under Regulation 2016/679 Opinion 04/2024 on the notion of main establishment of a controller in the Union under Art. 4.16(a) GDPR Guidelines 9/2022 on personal data breach notification under GDPR ¶66 Guidelines 9/2022 on personal data breach notification under GDPR
55(2) 1 Guidance .md
Guidance 1
Recommendations on calculating the audit cycle in EU Large-Scale IT Systems
55(3) 21 Case Law 1 Guidance .md
Case Law 21
Judgment of the Court (Grand Chamber) of 16 January 2024.#Österreichische Datenschutzbehörde v WK.#Request for a preliminary ruling from the Verwaltungsgerichtshof.#Reference for a preliminary ruling – Protection of natural persons with regard to the processing of personal data – Article 16 TFEU – Regulation (EU) 2016/679 – Article 2(2)(a) – Scope – Exclusions – Activities which fall outside the scope of Union law – Article 4(2) TEU – Activities concerning national security – Committee of inquir Judgment of the Court (First Chamber) of 24 March 2022.#X and Z v Autoriteit Persoonsgegevens.#Request for a preliminary ruling from the Rechtbank Midden-Nederland.#Reference for a preliminary ruling – Protection of natural persons with regard to the processing of personal data – Regulation (EU) 2016/679 – Competence of the supervisory authority – Article 55(3) – Processing operations of courts acting in their judicial capacity – Concept – Making available to a journalist of documents arising fr ¶31 Judgment of the Court (First Chamber) of 24 March 2022.#X and Z v Autoriteit Persoonsgegevens.#Request for a preliminary ruling from the Rechtbank Midden-Nederland.#Reference for a preliminary ruling – Protection of natural persons with regard to the processing of personal data – Regulation (EU) 2016/679 – Competence of the supervisory authority – Article 55(3) – Processing operations of courts acting in their judicial capacity – Concept – Making available to a journalist of documents arising fr ¶30 Judgment of the Court (First Chamber) of 24 March 2022.#X and Z v Autoriteit Persoonsgegevens.#Request for a preliminary ruling from the Rechtbank Midden-Nederland.#Reference for a preliminary ruling – Protection of natural persons with regard to the processing of personal data – Regulation (EU) 2016/679 – Competence of the supervisory authority – Article 55(3) – Processing operations of courts acting in their judicial capacity – Concept – Making available to a journalist of documents arising fr ¶28 Judgment of the Court (First Chamber) of 24 March 2022.#X and Z v Autoriteit Persoonsgegevens.#Request for a preliminary ruling from the Rechtbank Midden-Nederland.#Reference for a preliminary ruling – Protection of natural persons with regard to the processing of personal data – Regulation (EU) 2016/679 – Competence of the supervisory authority – Article 55(3) – Processing operations of courts acting in their judicial capacity – Concept – Making available to a journalist of documents arising fr ¶26 Judgment of the Court (First Chamber) of 24 March 2022.#X and Z v Autoriteit Persoonsgegevens.#Request for a preliminary ruling from the Rechtbank Midden-Nederland.#Reference for a preliminary ruling – Protection of natural persons with regard to the processing of personal data – Regulation (EU) 2016/679 – Competence of the supervisory authority – Article 55(3) – Processing operations of courts acting in their judicial capacity – Concept – Making available to a journalist of documents arising fr ¶24 Judgment of the Court (First Chamber) of 24 March 2022.#X and Z v Autoriteit Persoonsgegevens.#Request for a preliminary ruling from the Rechtbank Midden-Nederland.#Reference for a preliminary ruling – Protection of natural persons with regard to the processing of personal data – Regulation (EU) 2016/679 – Competence of the supervisory authority – Article 55(3) – Processing operations of courts acting in their judicial capacity – Concept – Making available to a journalist of documents arising fr ¶23 Judgment of the Court (First Chamber) of 24 March 2022.#X and Z v Autoriteit Persoonsgegevens.#Request for a preliminary ruling from the Rechtbank Midden-Nederland.#Reference for a preliminary ruling – Protection of natural persons with regard to the processing of personal data – Regulation (EU) 2016/679 – Competence of the supervisory authority – Article 55(3) – Processing operations of courts acting in their judicial capacity – Concept – Making available to a journalist of documents arising fr +13 more
Guidance 1
Opinion 5/2019 on the interplay between the ePrivacy Directive and the GDPR, in particular regarding the competence, tasks and powers of data protection authorities