GDPR Art. 66 EN

Urgency procedure

Supervisory Authorities Supervision

In force — consolidated2016-05-04 · CELEX 02016R0679-20160504 · ELI ↗

Version history 2

2016-05-04in force CELEX 02016R0679-20160504
2016-04-27 CELEX 32016R0679

1.

In exceptional circumstances, where a supervisory authority concerned considers that there is an urgent need to act in order to protect the rights and freedoms of data subjects, it may, by way of derogation from the consistency mechanism referred to in Articles 63, 64 and 65 or the procedure referred to in Article 60, immediately adopt provisional measures intended to produce legal effects on its own territory with a specified period of validity which shall not exceed three months. The supervisory authority shall, without delay, communicate those measures and the reasons for adopting them to the other supervisory authorities concerned, to the Board and to the Commission.¶

Supervisory Authorities Supervision 17
2.

Where a supervisory authority has taken a measure pursuant to paragraph 1 and considers that final measures need urgently be adopted, it may request an urgent opinion or an urgent binding decision from the Board, giving reasons for requesting such opinion or decision.¶

Supervisory Authorities Supervision 12
3.

Any supervisory authority may request an urgent opinion or an urgent binding decision, as the case may be, from the Board where a competent supervisory authority has not taken an appropriate measure in a situation where there is an urgent need to act, in order to protect the rights and freedoms of data subjects, giving reasons for requesting such opinion or decision, including for the urgent need to act.¶

Supervisory Authorities Supervision 6
4.

By derogation from Article 64(3) and Article 65(2), an urgent opinion or an urgent binding decision referred to in paragraphs 2 and 3 of this Article shall be adopted within two weeks by simple majority of the members of the Board.¶

2

Enforcement

Cited in 1 fines totalling €800K

Top authority: 🇪🇺French Data Protection Authority (CNIL) (1) · median fine €800,000 · see all enforcement for Art. 66 →

Connections by provision

66(1) 8 Case Law 9 Guidance .md

Case Law 8

Judgment of the Court (Third Chamber) of 25 January 2018.#Maximilian Schrems v Facebook Ireland Limited.#Request for a preliminary ruling from the Oberster Gerichtshof.#Reference for a preliminary ruling — Area of freedom, security and justice — Regulation (EC) No 44/2001 — Articles 15 and 16 — Jurisdiction in respect of consumer contracts — Definition of ‘consumer’ — Assignment between consumers of claims against the same trader or professional.#Case C-498/16. Judgment of the General Court (Eighth Chamber, Extended Composition) of 26 April 2023.#Single Resolution Board v European Data Protection Supervisor.#Protection of personal data – Procedure for granting compensation to shareholders and creditors following the resolution of a bank – Decision of the EDPS in which it found that the SRB failed to fulfil its obligations concerning the processing of personal data – Article 15(1)(d) of Regulation (EU) 2018/1725 – Concept of personal data – Article 3(1) Judgment of the Court (Grand Chamber) of 15 June 2021.#Facebook Ireland Ltd and Others v Gegevensbeschermingsautoriteit.#Request for a preliminary ruling from the Hof van beroep te Brussel.#Reference for a preliminary ruling – Protection of natural persons with regard to the processing of personal data – Charter of Fundamental Rights of the European Union – Articles 7, 8 and 47 – Regulation (EU) 2016/679 – Cross-border processing of personal data – ‘One-stop shop’ mechanism – Sincere and effecti ¶9 Judgment of the Court (Third Chamber) of 25 January 2018.#Maximilian Schrems v Facebook Ireland Limited.#Request for a preliminary ruling from the Oberster Gerichtshof.#Reference for a preliminary ruling — Area of freedom, security and justice — Regulation (EC) No 44/2001 — Articles 15 and 16 — Jurisdiction in respect of consumer contracts — Definition of ‘consumer’ — Assignment between consumers of claims against the same trader or professional.#Case C-498/16. ¶17 Judgment of the Court (Grand Chamber) of 15 June 2021.#Facebook Ireland Ltd and Others v Gegevensbeschermingsautoriteit.#Request for a preliminary ruling from the Hof van beroep te Brussel.#Reference for a preliminary ruling – Protection of natural persons with regard to the processing of personal data – Charter of Fundamental Rights of the European Union – Articles 7, 8 and 47 – Regulation (EU) 2016/679 – Cross-border processing of personal data – ‘One-stop shop’ mechanism – Sincere and effecti ¶42 Judgment of the Court of First Instance (Third Chamber) of 8 November 2007.#The Bavarian Lager Co. Ltd v Commission of the European Communities.#Access to documents - Regulation (EC) No 1049/2001 - Documents relating to proceedings for failure to fulfil obligations - Decision refusing access - Protection of physical persons in relation to processing of personal data - Regulation (EC) No 45/2001 - Concept of private life.#Case T-194/04. ¶59 Judgment of the Court (Grand Chamber) of 15 June 2021.#Facebook Ireland Ltd and Others v Gegevensbeschermingsautoriteit.#Request for a preliminary ruling from the Hof van beroep te Brussel.#Reference for a preliminary ruling – Protection of natural persons with regard to the processing of personal data – Charter of Fundamental Rights of the European Union – Articles 7, 8 and 47 – Regulation (EU) 2016/679 – Cross-border processing of personal data – ‘One-stop shop’ mechanism – Sincere and effecti ¶52 Judgment of the General Court (Eighth Chamber, Extended Composition) of 26 April 2023.#Single Resolution Board v European Data Protection Supervisor.#Protection of personal data – Procedure for granting compensation to shareholders and creditors following the resolution of a bank – Decision of the EDPS in which it found that the SRB failed to fulfil its obligations concerning the processing of personal data – Article 15(1)(d) of Regulation (EU) 2018/1725 – Concept of personal data – Article 3(1)

Guidance 9

EDPB Annual Report 2023 EDPB-EDPS Joint Opinion 01/2023 on the Proposal for a Regulation of the European Parliament and of the Council laying down additional procedural rules relating to the enforcement of Regulation (EU) 2016/679 EDPB Annual Report 2021 Guidelines 02/2022 on the application of Article 60 GDPR ¶41 Guidelines 02/2022 on the application of Article 60 GDPR ¶262 Guidelines 02/2022 on the application of Article 60 GDPR ¶261 Guidelines 02/2022 on the application of Article 60 GDPR ¶260 Guidelines 02/2022 on the application of Article 60 GDPR +1 more

66(2) 3 Case Law 9 Guidance .md

Case Law 3

Judgment of the Court (Grand Chamber) of 15 June 2021.#Facebook Ireland Ltd and Others v Gegevensbeschermingsautoriteit.#Request for a preliminary ruling from the Hof van beroep te Brussel.#Reference for a preliminary ruling – Protection of natural persons with regard to the processing of personal data – Charter of Fundamental Rights of the European Union – Articles 7, 8 and 47 – Regulation (EU) 2016/679 – Cross-border processing of personal data – ‘One-stop shop’ mechanism – Sincere and effecti ¶59 Judgment of the Court (Grand Chamber) of 15 June 2021.#Facebook Ireland Ltd and Others v Gegevensbeschermingsautoriteit.#Request for a preliminary ruling from the Hof van beroep te Brussel.#Reference for a preliminary ruling – Protection of natural persons with regard to the processing of personal data – Charter of Fundamental Rights of the European Union – Articles 7, 8 and 47 – Regulation (EU) 2016/679 – Cross-border processing of personal data – ‘One-stop shop’ mechanism – Sincere and effecti ¶71 Judgment of the Court (Grand Chamber) of 15 June 2021.#Facebook Ireland Ltd and Others v Gegevensbeschermingsautoriteit.#Request for a preliminary ruling from the Hof van beroep te Brussel.#Reference for a preliminary ruling – Protection of natural persons with regard to the processing of personal data – Charter of Fundamental Rights of the European Union – Articles 7, 8 and 47 – Regulation (EU) 2016/679 – Cross-border processing of personal data – ‘One-stop shop’ mechanism – Sincere and effecti

Guidance 9

EDPB Article 97 GDPR application report: GDPR successful but improvements needed EDPB-EDPS Joint Opinion 01/2023 on the Proposal for a Regulation of the European Parliament and of the Council laying down additional procedural rules relating to the enforcement of Regulation (EU) 2016/679 Guidelines 02/2022 on the application of Article 60 GDPR EDPB Annual Report 2021 EDPB Annual Report 2023 ¶261 Guidelines 02/2022 on the application of Article 60 GDPR ¶260 Guidelines 02/2022 on the application of Article 60 GDPR ¶262 Guidelines 02/2022 on the application of Article 60 GDPR +1 more

66(3) 6 Guidance .md

Guidance 6

EDPB Article 97 GDPR application report: GDPR successful but improvements needed Guidelines 02/2022 on the application of Article 60 GDPR EDPB-EDPS Joint Opinion 01/2023 on the Proposal for a Regulation of the European Parliament and of the Council laying down additional procedural rules relating to the enforcement of Regulation (EU) 2016/679 Guidelines 06/2020 on the interplay of the Second Payment Services Directive and the GDPR ¶254 Guidelines 02/2022 on the application of Article 60 GDPR ¶261 Guidelines 02/2022 on the application of Article 60 GDPR

66(4) 2 Guidance .md

Guidance 2

Recommendations on calculating the audit cycle in EU Large-Scale IT Systems EDPB-EDPS Joint Opinion 01/2023 on the Proposal for a Regulation of the European Parliament and of the Council laying down additional procedural rules relating to the enforcement of Regulation (EU) 2016/679