# Competence of the lead supervisory authority 56(2) — GDPR — provision context

> Focused context for a single provision (56(2)), curated from overview.legal on 2026-08-22. Canonical: https://overview.legal/laws/gdpr/art-56#par-2
> Verify against the official text (EUR-Lex / wetten.overheid.nl) before relying on it.

Part of **Competence of the lead supervisory authority** (GDPR, full article: https://overview.legal/laws/gdpr/art-56).

## Provision text

### 56(2)

By derogation from paragraph 1, each supervisory authority shall be competent to handle a complaint lodged with it or a possible infringement of this Regulation, if the subject matter relates only to an establishment in its Member State or substantially affects data subjects only in its Member State.


## Topics on this provision

- **Supervisory Authorities** — https://overview.legal/topics/supervisory-authorities
  National data protection authorities and their powers
- **Supervision** — https://overview.legal/topics/toezicht
  Oversight and enforcement by supervisory authorities

## Cited by (exact-provision citations)

- **Judgment of the General Court (Tenth Chamber, Extended Composition) of 16 July 2025.#Lisa Ballmann v European Data Protection Board.#Protection of personal data – Complaint against the controller of personal data of users of an online social network in the European Union – Article 65(1)(a) of Regulation (EU) 2016/679 – Binding decision of the European Data Protection Board – Complainant’s request for access to the file prepared for the purposes of the binding decision – Refusal to grant access –** (case-law) — https://overview.legal/posts/132139
- **Judgment of the Court (Grand Chamber) of 15 June 2021.#Facebook Ireland Ltd and Others v Gegevensbeschermingsautoriteit.#Request for a preliminary ruling from the Hof van beroep te Brussel.#Reference for a preliminary ruling – Protection of natural persons with regard to the processing of personal data – Charter of Fundamental Rights of the European Union – Articles 7, 8 and 47 – Regulation (EU) 2016/679 – Cross-border processing of personal data – ‘One-stop shop’ mechanism – Sincere and effecti** (case-law) — https://overview.legal/posts/132323
- **Judgment of the Court (Grand Chamber) of 15 June 2021.#Facebook Ireland Ltd and Others v Gegevensbeschermingsautoriteit.#Request for a preliminary ruling from the Hof van beroep te Brussel.#Reference for a preliminary ruling – Protection of natural persons with regard to the processing of personal data – Charter of Fundamental Rights of the European Union – Articles 7, 8 and 47 – Regulation (EU) 2016/679 – Cross-border processing of personal data – ‘One-stop shop’ mechanism – Sincere and effecti** ¶58 (case-law, Court of Justice of the European Union) — https://overview.legal/posts/132323
- **Judgment of the Court (Grand Chamber) of 15 June 2021.#Facebook Ireland Ltd and Others v Gegevensbeschermingsautoriteit.#Request for a preliminary ruling from the Hof van beroep te Brussel.#Reference for a preliminary ruling – Protection of natural persons with regard to the processing of personal data – Charter of Fundamental Rights of the European Union – Articles 7, 8 and 47 – Regulation (EU) 2016/679 – Cross-border processing of personal data – ‘One-stop shop’ mechanism – Sincere and effecti** ¶52 (case-law, Court of Justice of the European Union) — https://overview.legal/posts/132323
- **Judgment of the General Court (Tenth Chamber, Extended Composition) of 16 July 2025.#Lisa Ballmann v European Data Protection Board.#Protection of personal data – Complaint against the controller of personal data of users of an online social network in the European Union – Article 65(1)(a) of Regulation (EU) 2016/679 – Binding decision of the European Data Protection Board – Complainant’s request for access to the file prepared for the purposes of the binding decision – Refusal to grant access –** ¶81 (case-law, General Court) — https://overview.legal/posts/132139
- **Guidelines 04/2022 on the calculation of administrative fines under the GDPR** (guidance) — https://overview.legal/posts/38068
- **Opinion 04/2024 on the notion of main establishment of a controller in the Union under Art. 4.16(a) GDPR** (guidance) — https://overview.legal/posts/125773
- **EDPB-EDPS Joint Opinion 01/2023 on the Proposal for a Regulation of the European Parliament and of the Council laying down additional procedural rules relating to the enforcement of Regulation (EU) 2016/679** (guidance) — https://overview.legal/posts/125829
- **Guidelines 09/2020 on relevant and reasoned objection under Regulation 2016/679** (guidance) — https://overview.legal/posts/38061
- **Guidelines 06/2022 on the practical implementation of amicable settlements** (guidance) — https://overview.legal/posts/38072
- **Guidelines 03/2021 on the application of Article 65(1)(a) GDPR** (guidance) — https://overview.legal/posts/38137
- **Guidelines 02/2022 on the application of Article 60 GDPR** (guidance) — https://overview.legal/posts/38066

---
Generated by overview.legal · https://overview.legal/laws/gdpr/art-56#par-2 · 2026-08-22