GDPR Art. 31 EN
LLM context A cited markdown file you can paste into your AI assistant (ChatGPT, Claude, a RAG or project knowledge base) to ground it in this article. Contains: the article text, related recitals, cases citing it, enforcement stats and top fines, guidance, and related topics. Everything links back to its source on overview.legal — legal information, not advice.

Cooperation with the supervisory authority

Supervision Supervisory Authorities Controllers Processors
In force — consolidated2016-05-04 · CELEX 02016R0679-20160504 · ELI ↗
Version history 2
  • 2016-05-04in force CELEX 02016R0679-20160504
  • 2016-04-27 CELEX 32016R0679

The controller and the processor and, where applicable, their representatives, shall cooperate, on request, with the supervisory authority in the performance of its tasks.

Enforcement

Cited in 79 fines totalling €23.8M

Top authority: 🇪🇺Polish National Personal Data Protection Office (UODO) (18) · median fine €4,750 · see all enforcement for Art. 31 →

Related across sources

Enforcement Slovenian DPA fines controller €1,282 for missing Art. 28(3) processor contract Enforcement NAIH fines online store HUF 2M for unclear and incomplete privacy notice Enforcement AEPD sanctions ACVIL Aparcamientos for denying access to parking surveillance footage Enforcement APDCAT sanctions Madremanya City Council for exposing applicants' sensitive data in tender Enforcement AEPD fines Alkora, S.A. for ransomware breach exposing 40,000 individuals' data Guidance Opinion 21/2026 on the draft decision of the Irish Supervisory Authority regarding the Controller Binding Corporate Rules of the Flutter Group