GDPR Art. 51 EN
LLM context A cited markdown file you can paste into your AI assistant (ChatGPT, Claude, a RAG or project knowledge base) to ground it in this article. Contains: the article text, related recitals, cases citing it, enforcement stats and top fines, guidance, and related topics. Everything links back to its source on overview.legal — legal information, not advice.

Supervisory authority

Supervision Supervisory Authorities
In force — consolidated2016-05-04 · CELEX 02016R0679-20160504 · ELI ↗
Version history 2
  • 2016-05-04in force CELEX 02016R0679-20160504
  • 2016-04-27 CELEX 32016R0679
  1. 1.

    Each Member State shall provide for one or more independent public authorities to be responsible for monitoring the application of this Regulation, in order to protect the fundamental rights and freedoms of natural persons in relation to processing and to facilitate the free flow of personal data within the Union (‘supervisory authority’).

    Supervision Supervisory Authorities Monitoring 89
  2. 2.

    Each supervisory authority shall contribute to the consistent application of this Regulation throughout the Union. For that purpose, the supervisory authorities shall cooperate with each other and the Commission in accordance with Chapter VII.

    Supervision Supervisory Authorities 14
  3. 3.

    Where more than one supervisory authority is established in a Member State, that Member State shall designate the supervisory authority which is to represent those authorities in the Board and shall set out the mechanism to ensure compliance by the other authorities with the rules relating to the consistency mechanism referred to in Article 63.

    Supervision Supervisory Authorities 2
  4. 4.

    Each Member State shall notify to the Commission the provisions of its law which it adopts pursuant to this Chapter, by 25 May 2018 and, without delay, any subsequent amendment affecting them.

    4

Enforcement

Cited in 4 fines totalling €2K

Top authority: 🇦🇹DSB (Austria) (2) · median fine €2,000 · see all enforcement for Art. 51 →

Connections by provision

51(1) 43 Case Law 22 Enforcement 21 Guidance 1 Literature 2 News .md
Case Law 43
X and Z v Autoriteit Persoonsgegevens BE v Nemzeti Adatvédelmi és Információszabadság Hatóság UF and AB v Land Hessen Österreichische Datenschutzbehörde v WK TR v Land Hessen Proceedings brought by Ministerio Fiscal CJEU - C‑313/23, C‑316/23 and C‑332/23 - Inspektorat kam Visshia sadeben savet État luxembourgeois v B and Others +35 more
Enforcement 22
Austrian DSB: Controller's use of social security number for statutory financial aid was Austrian DSB: e-marketplace transfer of customer data to China and US requires valid Art. DSB (Austria) - DSB-D124.5337 DSB: Retailer must grant full access and delete data after third-party fraud order DSB (Austria) - 2025-0.960.016 DSB Austria: disclosure of health data to court-appointed expert in legal dispute lawful DSB (Austria) - DSB-D124.2437/25 DSB: No processor access violation under Art. 15 GDPR when controller deleted data +14 more
Guidance 21
Opinion 5/2019 on the interplay between the ePrivacy Directive and the GDPR, in particular regarding the competence, tasks and powers of data protection authorities Opinion 8/2019 on the competence of a supervisory authority in case of a change in circumstances relating to the main or single establishment Recommendations 01/2021 on the adequacy referential under the Law Enforcement Directive Guidelines 02/2022 on the application of Article 60 GDPR EDPB Annual Report 2021 Contribution of the EDPB to the European Commission’s evaluation of the Data Protection Law Enforcement Directive (‘‘LED’’) under Article 62 LED Opinion 27/2025 regarding the European Commission Draft Implementing Decision pursuant to Directive (EU) 2016/680 on the adequate protection of personal data by the United Kingdom Opinion 08/2024 on Valid Consent in the Context of Consent or Pay Models Implemented by Large Online Platforms +13 more
Literature 1
Perspectives for Open Source AI
News 2
The United Kingdom's draft decisions regarding adequate protection: The EDPB issues opinions. Draft UK adequacy decisions: EDPB adopts opinions
51(2) 4 Case Law 2 Enforcement 8 Guidance .md
Case Law 4
Meta Platforms v noyb Facebook Ireland Ltd and Others v Gegevensbeschermingsautoriteit ¶72 Facebook Ireland Ltd and Others v Gegevensbeschermingsautoriteit ¶38 Meta Platforms v noyb
Enforcement 2
IMY (Sweden) - IMY-2024-2904 ¶6 IMY (Sweden) - IMY-2024-2904
Guidance 8
Guidelines 02/2022 on the application of Article 60 GDPR Opinion 28/2024 on certain data protection aspects related to the processing of personal data in the context of AI models Opinion 08/2024 on Valid Consent in the Context of Consent or Pay Models Implemented by Large Online Platforms ¶30 Opinion 08/2024 on Valid Consent in the Context of Consent or Pay Models Implemented by Large Online Platforms ¶23 Opinion 28/2024 on certain data protection aspects related to the processing of personal data in the context of AI models ¶43 Guidelines 02/2022 on the application of Article 60 GDPR ¶197 Guidelines 02/2022 on the application of Article 60 GDPR ¶212 Guidelines 02/2022 on the application of Article 60 GDPR
51(3) 2 Guidance .md
Guidance 2
Recommendations on calculating the audit cycle in EU Large-Scale IT Systems ¶3 Recommendations on calculating the audit cycle in EU Large-Scale IT Systems
51(4) 1 Case Law 3 Guidance .md
Case Law 1
¶121 Inspektorat kam Visshia sadeben savet
Guidance 3
EDPB-EDPS Joint Opinion 04/2022 on the Proposal for a Regulation of the European Parliament and of the Council laying down rules to prevent and combat child sexual abuse ¶91 EDPB-EDPS Joint Opinion 04/2022 on the Proposal for a Regulation of the European Parliament and of the Council laying down rules to prevent and combat child sexual abuse ¶84 EDPB-EDPS Joint Opinion 04/2022 on the Proposal for a Regulation of the European Parliament and of the Council laying down rules to prevent and combat child sexual abuse