§ GDPR · Article 54

GDPR Article 54: Obligations, Deadlines & Penalties

Regulation (EU) 2016/679, Article 54 · All obligations · GDPR

At a glance

Article 54 of the GDPR imposes 7 obligations on Member State, supervisory authority members and staff.

§ Obligations

All obligations under Article 54

Obligation 1

Each Member State shall provide by law for the establishment of each supervisory authority. Regulation (EU) 2016/679, Article 54, Article 54

Obligated entity: Member State
Action required: establish
Deadline: —
Penalty: —

Obligation 2

Each Member State shall provide by law for the qualifications and eligibility conditions required to be appointed as member of each supervisory authority. Regulation (EU) 2016/679, Article 54, Article 54

Obligated entity: Member State
Action required: define
Deadline: —
Penalty: —

Obligation 3

Each Member State shall provide by law for the rules and procedures for the appointment of the member or members of each supervisory authority. Regulation (EU) 2016/679, Article 54, Article 54

Obligated entity: Member State
Action required: define
Deadline: —
Penalty: —

Obligation 4

Each Member State shall provide by law for the duration of the term of the member or members of each supervisory authority of no less than four years. Regulation (EU) 2016/679, Article 54, Article 54

Obligated entity: Member State
Action required: define
Deadline: —
Penalty: —

Obligation 5

Each Member State shall provide by law for whether and, if so, for how many terms the member or members of each supervisory authority is eligible for reappointment. Regulation (EU) 2016/679, Article 54, Article 54

Obligated entity: Member State
Action required: define
Deadline: —
Penalty: —

Obligation 6

Each Member State shall provide by law for the conditions governing the obligations of the member or members and staff of each supervisory authority, prohibitions on actions, occupations and benefits incompatible therewith during and after the term of office and rules governing the cessation of employment. Regulation (EU) 2016/679, Article 54, Article 54

Obligated entity: Member State
Action required: define
Deadline: —
Penalty: —

Obligation 7

The member or members and the staff of each supervisory authority shall be subject to a duty of professional secrecy both during and after their term of office, with regard to any confidential information which has come to their knowledge in the course of the performance of their tasks or exercise of their powers. Regulation (EU) 2016/679, Article 54, Article 54

Obligated entity: supervisory authority members and staff
Action required: maintain secrecy
Deadline: —
Penalty: —

§ Frequently asked

Questions about Article 54

Who must comply with Article 54 of the GDPR? +

Member State, supervisory authority members and staff.

What does Article 54 of the GDPR require? +

establish define maintain secrecy

Need a cross-border briefing on GDPR Article 54?

Search Fontvera ↵

All EU obligation pages · All GDPR articles