§ GDPR · Article 56
GDPR Article 56: Obligations, Deadlines & Penalties
At a glance
Article 56 of the GDPR imposes 4 obligations on lead supervisory authority, supervisory authority. At least one obligation carries an explicit compliance deadline.
§ Obligations
All obligations under Article 56
Obligation 1
The supervisory authority shall inform the lead supervisory authority without delay on matters where it is competent to handle a complaint or possible infringement relating only to an establishment in its Member State or substantially affecting data subjects only in its Member State.
Regulation (EU) 2016/679, Article 56, Article 56
- Obligated entity
-
supervisory authority
- Action required
-
inform
- Deadline
-
without delay
- Penalty
-
—
Obligation 2
Within a period of three weeks after being informed, the lead supervisory authority shall decide whether or not it will handle the case in accordance with the procedure provided in Article 60.
Regulation (EU) 2016/679, Article 56, Article 56
- Obligated entity
-
lead supervisory authority
- Action required
-
decide
- Deadline
-
three weeks after being informed
- Penalty
-
—
Obligation 3
The lead supervisory authority shall take utmost account of the draft decision submitted by the supervisory authority which informed it when preparing the draft decision referred to in Article 60(3).
Regulation (EU) 2016/679, Article 56, Article 56
- Obligated entity
-
lead supervisory authority
- Action required
-
take account
- Deadline
-
—
- Penalty
-
—
Obligation 4
Where the lead supervisory authority decides not to handle the case, the supervisory authority which informed the lead supervisory authority shall handle it according to Articles 61 and 62.
Regulation (EU) 2016/679, Article 56, Article 56
- Obligated entity
-
supervisory authority
- Action required
-
handle
- Deadline
-
—
- Penalty
-
—
§ Frequently asked
Questions about Article 56
Who must comply with Article 56 of the GDPR?
+
lead supervisory authority, supervisory authority.
What does Article 56 of the GDPR require?
+
inform decide take account
What is the compliance deadline for GDPR Article 56?
+
three weeks after being informed; without delay