GDPR Art. 78 EN

Right to an effective judicial remedy against a supervisory authority

Supervision Supervisory Authorities

In force — consolidated2016-05-04 · CELEX 02016R0679-20160504 · ELI ↗

Version history 2

2016-05-04in force CELEX 02016R0679-20160504
2016-04-27 CELEX 32016R0679

1.

Without prejudice to any other administrative or non-judicial remedy, each natural or legal person shall have the right to an effective judicial remedy against a legally binding decision of a supervisory authority concerning them.¶

Supervisory Authorities Supervision 58
2.

Without prejudice to any other administrative or non-judicial remedy, each data subject shall have the right to a an effective judicial remedy where the supervisory authority which is competent pursuant to Articles 55 and 56 does not handle a complaint or does not inform the data subject within three months on the progress or outcome of the complaint lodged pursuant to Article 77.¶

Supervisory Authorities Supervision Personal Data
3.

Proceedings against a supervisory authority shall be brought before the courts of the Member State where the supervisory authority is established.¶

Supervisory Authorities Supervision 4
4.

Where proceedings are brought against a decision of a supervisory authority which was preceded by an opinion or a decision of the Board in the consistency mechanism, the supervisory authority shall forward that opinion or decision to the court.¶

Supervisory Authorities Supervision 3

Connections by provision

78(1) 55 Case Law 2 Guidance 1 Literature .md

Case Law 55

Judgment of the Court (Grand Chamber) of 15 June 2021.#Facebook Ireland Ltd and Others v Gegevensbeschermingsautoriteit.#Request for a preliminary ruling from the Hof van beroep te Brussel.#Reference for a preliminary ruling – Protection of natural persons with regard to the processing of personal data – Charter of Fundamental Rights of the European Union – Articles 7, 8 and 47 – Regulation (EU) 2016/679 – Cross-border processing of personal data – ‘One-stop shop’ mechanism – Sincere and effecti Judgment of the Court (Third Chamber) of 28 April 2022.#Meta Platforms Ireland Limited v Bundesverband der Verbraucherzentralen und Verbraucherverbände - Verbraucherzentrale Bundesverband eV.#Request for a preliminary ruling from the Bundesgerichtshof.#Reference for a preliminary ruling – Protection of natural persons with regard to the processing of personal data – Regulation (EU) 2016/679 – Article 80 – Representation of the data subjects by a not-for-profit association – Representative action Order of the General Court (Fourth Chamber, Extended Composition) of 7 December 2022.#WhatsApp Ireland Ltd v European Data Protection Board.#Action for annulment – Protection of personal data – Draft decision of the lead supervisory authority – Resolution of disputes between supervisory authorities by the European Data Protection Board – Binding decision – Article 60(4) and Article 65(1)(a) of Regulation (EU) 2016/679 – Act not open to challenge – Preparatory act – Lack of individual concern.#Ca Judgment of the Court (First Chamber) of 7 December 2023.#OQ v Land Hessen.#Request for a preliminary ruling from the Verwaltungsgericht Wiesbaden.#Reference for a preliminary ruling – Protection of natural persons with regard to the processing of personal data – Regulation (EU) 2016/679 – Article 22 – Automated individual decision-making – Credit information agencies – Automated establishment of a probability value concerning the ability of a person to meet payment commitments in the future (‘s Judgment of the Court (First Chamber) of 12 January 2023.#BE v Nemzeti Adatvédelmi és Információszabadság Hatóság.#Request for a preliminary ruling from the Fővárosi Törvényszék.#Reference for a preliminary ruling – Protection of natural persons with regard to the processing of personal data – Regulation (EU) 2016/679 – Articles 77 to 79 – Remedies – Parallel exercise – Relationship – Procedural autonomy – Effectiveness of the protection rules established by that regulation – Consistent and homo Judgment of the Court (First Chamber) of 7 December 2023.#UF and AB v Land Hessen.#Requests for a preliminary ruling from the Verwaltungsgericht Wiesbaden.#Reference for a preliminary ruling – Protection of natural persons with regard to the processing of personal data – Regulation (EU) 2016/679 – Article 5(1)(a) – Principle of ‘lawfulness’ – Point (f) of the first subparagraph of Article 6(1) – Necessity of processing for the purposes of the legitimate interests pursued by the controller or by Judgment of the Court (Grand Chamber) of 7 May 2024.#SO.#Request for a preliminary ruling from the Unabhängige Schiedskommission Wien.#Reference for a preliminary ruling – Admissibility – Article 267 TFEU – Concept of ‘court or tribunal’ – National arbitration committee competent to combat doping in sport – Criteria – Independence of the body making the reference – Principle of effective judicial protection – Inadmissibility of the request for a preliminary ruling.#Case C-115/22. Judgment of the Court (Grand Chamber) of 4 October 2024.#ND v DR.#Request for a preliminary ruling from the Bundesgerichtshof.#Reference for a preliminary ruling – Protection of personal data – Regulation (EU) 2016/679 – Chapter VIII – Remedies – Medicinal products marketed by a pharmacist on an online platform – Action brought before the national civil courts by a competitor of that pharmacist on the basis of the prohibition of unfair commercial practices for infringement by the pharmacist of t +47 more

Guidance 2

Guidelines 02/2022 on the application of Article 60 GDPR ¶213 Guidelines 02/2022 on the application of Article 60 GDPR

Literature 1

If it ain’t broke, don’t fix it? Ten improvements for the upcoming tenth anniversary of the General Data Protection Regulation

78(3) 2 Case Law 2 Guidance .md

Case Law 2

Judgment of the Court (Eighth Chamber), 12 December 2013.#X.#Request for a preliminary ruling from the Gerechtshof te ’s-Hertogenbosch.#Protection of individuals with regard to the processing of personal data — Directive 95/46/EC — Conditions for exercising a right of access — Levying of excessive fees.#Case C‑486/12. ¶4 Judgment of the Court (Eighth Chamber), 12 December 2013.#X.#Request for a preliminary ruling from the Gerechtshof te ’s-Hertogenbosch.#Protection of individuals with regard to the processing of personal data — Directive 95/46/EC — Conditions for exercising a right of access — Levying of excessive fees.#Case C‑486/12.

Guidance 2

Guidelines 02/2022 on the application of Article 60 GDPR ¶226 Guidelines 02/2022 on the application of Article 60 GDPR

78(4) 2 Case Law 1 Guidance .md

Case Law 2

Order of the General Court (Fourth Chamber, Extended Composition) of 7 December 2022.#WhatsApp Ireland Ltd v European Data Protection Board.#Action for annulment – Protection of personal data – Draft decision of the lead supervisory authority – Resolution of disputes between supervisory authorities by the European Data Protection Board – Binding decision – Article 60(4) and Article 65(1)(a) of Regulation (EU) 2016/679 – Act not open to challenge – Preparatory act – Lack of individual concern.#Ca ¶32 Order of the General Court (Fourth Chamber, Extended Composition) of 7 December 2022.#WhatsApp Ireland Ltd v European Data Protection Board.#Action for annulment – Protection of personal data – Draft decision of the lead supervisory authority – Resolution of disputes between supervisory authorities by the European Data Protection Board – Binding decision – Article 60(4) and Article 65(1)(a) of Regulation (EU) 2016/679 – Act not open to challenge – Preparatory act – Lack of individual concern.#Ca

Guidance 1

Guidelines 03/2021 on the application of Article 65(1)(a) GDPR

Related across sources

News UODO (Poland) - DKE.561.1.2026 Enforcement AEPD (Spain) - PS/00249/2025 Enforcement Slovenian DPA fines controller €1,282 for missing Art. 28(3) processor contract Enforcement ANSPDCP (Romania) - Fine against Homelux SRL Enforcement ANSPDCP (Romania) - Fine against Orange Romania SA of July 17, 2026 Case Law Council of State upholds €600,000 DPA fine against Enschede for Wi-Fi tracking