§ GDPR · Article 57

GDPR Article 57: Obligations, Deadlines & Penalties

Regulation (EU) 2016/679, Article 57 · All obligations · GDPR
At a glance
Article 57 of the GDPR imposes 20 obligations on supervisory authority. At least one obligation carries an explicit compliance deadline.
§ Obligations

All obligations under Article 57

Obligation 1
Monitor and enforce the application of this Regulation on its territory. Regulation (EU) 2016/679, Article 57, Article 57
Obligated entity
supervisory authority
Action required
monitor
Deadline
—
Penalty
—
Obligation 2
Promote public awareness and understanding of the risks, rules, safeguards and rights in relation to processing, with specific attention to activities addressed to children. Regulation (EU) 2016/679, Article 57, Article 57
Obligated entity
supervisory authority
Action required
promote
Deadline
—
Penalty
—
Obligation 3
Advise the national parliament, government, and other institutions on legislative and administrative measures relating to the protection of natural persons' rights and freedoms with regard to processing. Regulation (EU) 2016/679, Article 57, Article 57
Obligated entity
supervisory authority
Action required
advise
Deadline
—
Penalty
—
Obligation 4
Promote the awareness of controllers and processors of their obligations under this Regulation. Regulation (EU) 2016/679, Article 57, Article 57
Obligated entity
supervisory authority
Action required
promote
Deadline
—
Penalty
—
Obligation 5
Provide information to any data subject concerning the exercise of their rights under this Regulation upon request. Regulation (EU) 2016/679, Article 57, Article 57
Obligated entity
supervisory authority
Action required
provide
Deadline
—
Penalty
—
Obligation 6
Cooperate with supervisory authorities in other Member States to provide information to data subjects concerning the exercise of their rights. Regulation (EU) 2016/679, Article 57, Article 57
Obligated entity
supervisory authority
Action required
cooperate
Deadline
—
Penalty
—
Obligation 7
Handle complaints lodged by a data subject or representative body and investigate the subject matter to the extent appropriate. Regulation (EU) 2016/679, Article 57, Article 57
Obligated entity
supervisory authority
Action required
handle
Deadline
—
Penalty
—
Obligation 8
Inform the complainant of the progress and the outcome of the investigation within a reasonable period. Regulation (EU) 2016/679, Article 57, Article 57
Obligated entity
supervisory authority
Action required
inform
Deadline
within a reasonable period
Penalty
—
Obligation 9
Cooperate with, including sharing information and providing mutual assistance to, other supervisory authorities to ensure consistency of application and enforcement. Regulation (EU) 2016/679, Article 57, Article 57
Obligated entity
supervisory authority
Action required
cooperate
Deadline
—
Penalty
—
Obligation 10
Conduct investigations on the application of this Regulation, including on the basis of information received from other authorities. Regulation (EU) 2016/679, Article 57, Article 57
Obligated entity
supervisory authority
Action required
conduct
Deadline
—
Penalty
—
Obligation 11
Monitor relevant developments that have an impact on the protection of personal data, particularly ICT and commercial practices. Regulation (EU) 2016/679, Article 57, Article 57
Obligated entity
supervisory authority
Action required
monitor
Deadline
—
Penalty
—
Obligation 12
Adopt standard contractual clauses referred to in Article 28(8) and Article 46(2)(d). Regulation (EU) 2016/679, Article 57, Article 57
Obligated entity
supervisory authority
Action required
adopt
Deadline
—
Penalty
—
Obligation 13
Establish and maintain a list in relation to the requirement for data protection impact assessment pursuant to Article 35(4). Regulation (EU) 2016/679, Article 57, Article 57
Obligated entity
supervisory authority
Action required
establish
Deadline
—
Penalty
—
Obligation 14
Give advice on the processing operations referred to in Article 36(2). Regulation (EU) 2016/679, Article 57, Article 57
Obligated entity
supervisory authority
Action required
advise
Deadline
—
Penalty
—
Obligation 15
Encourage the drawing up of codes of conduct pursuant to Article 40(1). Regulation (EU) 2016/679, Article 57, Article 57
Obligated entity
supervisory authority
Action required
encourage
Deadline
—
Penalty
—
Obligation 16
Provide an opinion and approve codes of conduct which provide sufficient safeguards pursuant to Article 40(5). Regulation (EU) 2016/679, Article 57, Article 57
Obligated entity
supervisory authority
Action required
approve
Deadline
—
Penalty
—
Obligation 17
Encourage the establishment of data protection certification mechanisms and seals and marks pursuant to Article 42(1). Regulation (EU) 2016/679, Article 57, Article 57
Obligated entity
supervisory authority
Action required
encourage
Deadline
—
Penalty
—
Obligation 18
Approve the criteria of certification pursuant to Article 42(5). Regulation (EU) 2016/679, Article 57, Article 57
Obligated entity
supervisory authority
Action required
approve
Deadline
—
Penalty
—
Obligation 19
Carry out a periodic review of certifications issued in accordance with Article 42(7) where applicable. Regulation (EU) 2016/679, Article 57, Article 57
Obligated entity
supervisory authority
Action required
review
Deadline
periodic
Penalty
—
Obligation 20
Draft and publish the criteria for accreditation of a body for monitoring codes of conduct and of a certification body. Regulation (EU) 2016/679, Article 57, Article 57
Obligated entity
supervisory authority
Action required
draft
Deadline
—
Penalty
—
§ Deadlines

GDPR compliance deadlines

§ Frequently asked

Questions about Article 57

Who must comply with Article 57 of the GDPR? +
supervisory authority.
What does Article 57 of the GDPR require? +
monitor promote advise
What is the compliance deadline for GDPR Article 57? +
periodic; within a reasonable period
Need a cross-border briefing on GDPR Article 57?
Search Fontvera ↵
All EU obligation pages  ·  All GDPR articles