# Powers 58(3) — GDPR — provision context

> Focused context for a single provision (58(3)), curated from overview.legal on 2026-08-22. Canonical: https://overview.legal/laws/gdpr/art-58#par-3
> Verify against the official text (EUR-Lex / wetten.overheid.nl) before relying on it.

Part of **Powers** (GDPR, full article: https://overview.legal/laws/gdpr/art-58).

## Provision text

### 58(3)

Each supervisory authority shall have all of the following authorisation and advisory powers:

a) to advise the controller in accordance with the prior consultation procedure referred to in Article 36;
b) to issue, on its own initiative or on request, opinions to the national parliament, the Member State government or, in accordance with Member State law, to other institutions and bodies as well as to the public on any issue related to the protection of personal data;
c) to authorise processing referred to in Article 36(5), if the law of the Member State requires such prior authorisation;
d) to issue an opinion and approve draft codes of conduct pursuant to Article 40(5);
e) to accredit certification bodies pursuant to Article 43;
f) to issue certifications and approve criteria of certification in accordance with Article 42(5);
g) to adopt standard data protection clauses referred to in Article 28(8) and in point (d) of Article 46(2);
h) to authorise contractual clauses referred to in point (a) of Article 46(3);
i) to authorise administrative arrangements referred to in point (b) of Article 46(3);
j) to approve binding corporate rules pursuant to Article 47.

## Topics on this provision

- **Supervisory Authorities** — https://overview.legal/topics/supervisory-authorities
  National data protection authorities and their powers
- **Supervision** — https://overview.legal/topics/toezicht
  Oversight and enforcement by supervisory authorities

## Cited by (exact-provision citations)

- **Meta Platforms and Others v Bundeskartellamt** (case-law) — https://overview.legal/posts/51482
- **Judgment of the Court (First Chamber) of 4 October 2024.#Agentsia po vpisvaniyata v OL.#Request for a preliminary ruling from the Varhoven administrativen sad.#Reference for a preliminary ruling – Protection of natural persons with regard to the processing of personal data – Regulation (EU) 2016/679 – Publication in the commercial register of a company’s constitutive instrument containing personal data – Directive (EU) 2017/1132 – Non-compulsory personal data – Lack of consent of the data subjec** (case-law) — https://overview.legal/posts/132161
- **Meta Platforms and Others v Bundeskartellamt** ¶12 (case-law, CJEU) — https://overview.legal/posts/51482
- **Judgment of the Court (First Chamber) of 4 October 2024.#Agentsia po vpisvaniyata v OL.#Request for a preliminary ruling from the Varhoven administrativen sad.#Reference for a preliminary ruling – Protection of natural persons with regard to the processing of personal data – Regulation (EU) 2016/679 – Publication in the commercial register of a company’s constitutive instrument containing personal data – Directive (EU) 2017/1132 – Non-compulsory personal data – Lack of consent of the data subjec** ¶170 (case-law, Court of Justice of the European Union) — https://overview.legal/posts/132161
- **Judgment of the Court (Fourth Chamber) of 29 January 2026.#Steiermärkische Bank und Sparkassen AG and Others v Österreichische Finanzmarktaufsichtsbehörde (FMA).#Request for a preliminary ruling from the Bundesverwaltungsgericht.#Reference for a preliminary ruling – Prevention of the use of the financial system for the purposes of money laundering or terrorist financing – Directive (EU) 2015/849 – Penalties – Article 58 – Liability of legal persons – Article 59 – Attribution to a legal person of** ¶30 (case-law, Court of Justice of the European Union) — https://overview.legal/posts/132127
- **Guidelines 10/2020 on restrictions under Article 23 GDPR** (guidance) — https://overview.legal/posts/38062

---
Generated by overview.legal · https://overview.legal/laws/gdpr/art-58#par-3 · 2026-08-22