§ GDPR · Article 57

GDPR Article 57: Obligations, Deadlines & Penalties

Regulation (EU) 2016/679, Article 57 · All obligations · GDPR
At a glance
Article 57 of the GDPR imposes 20 obligations on supervisory authority. At least one obligation carries an explicit compliance deadline.
§ Obligations

All obligations under Article 57

Obligation 1
Monitor and enforce the application of this Regulation on its territory. Regulation (EU) 2016/679, Article 57, Article 57
Obligated entity
supervisory authority
Action required
monitor
Deadline
Penalty
Obligation 2
Promote public awareness and understanding of the risks, rules, safeguards and rights in relation to processing, with specific attention to activities addressed to children. Regulation (EU) 2016/679, Article 57, Article 57
Obligated entity
supervisory authority
Action required
promote
Deadline
Penalty
Obligation 3
Advise the national parliament, government, and other institutions on legislative and administrative measures relating to the protection of natural persons' rights and freedoms with regard to processing. Regulation (EU) 2016/679, Article 57, Article 57
Obligated entity
supervisory authority
Action required
advise
Deadline
Penalty
Obligation 4
Promote the awareness of controllers and processors of their obligations under this Regulation. Regulation (EU) 2016/679, Article 57, Article 57
Obligated entity
supervisory authority
Action required
promote
Deadline
Penalty
Obligation 5
Provide information to any data subject concerning the exercise of their rights under this Regulation upon request. Regulation (EU) 2016/679, Article 57, Article 57
Obligated entity
supervisory authority
Action required
provide
Deadline
Penalty
Obligation 6
Cooperate with supervisory authorities in other Member States to provide information to data subjects concerning the exercise of their rights. Regulation (EU) 2016/679, Article 57, Article 57
Obligated entity
supervisory authority
Action required
cooperate
Deadline
Penalty
Obligation 7
Handle complaints lodged by a data subject or representative body and investigate the subject matter to the extent appropriate. Regulation (EU) 2016/679, Article 57, Article 57
Obligated entity
supervisory authority
Action required
handle
Deadline
Penalty
Obligation 8
Inform the complainant of the progress and the outcome of the investigation within a reasonable period. Regulation (EU) 2016/679, Article 57, Article 57
Obligated entity
supervisory authority
Action required
inform
Deadline
within a reasonable period
Penalty
Obligation 9
Cooperate with, including sharing information and providing mutual assistance to, other supervisory authorities to ensure consistency of application and enforcement. Regulation (EU) 2016/679, Article 57, Article 57
Obligated entity
supervisory authority
Action required
cooperate
Deadline
Penalty
Obligation 10
Conduct investigations on the application of this Regulation, including on the basis of information received from other authorities. Regulation (EU) 2016/679, Article 57, Article 57
Obligated entity
supervisory authority
Action required
conduct
Deadline
Penalty
Obligation 11
Monitor relevant developments that have an impact on the protection of personal data, particularly ICT and commercial practices. Regulation (EU) 2016/679, Article 57, Article 57
Obligated entity
supervisory authority
Action required
monitor
Deadline
Penalty
Obligation 12
Adopt standard contractual clauses referred to in Article 28(8) and Article 46(2)(d). Regulation (EU) 2016/679, Article 57, Article 57
Obligated entity
supervisory authority
Action required
adopt
Deadline
Penalty
Obligation 13
Establish and maintain a list in relation to the requirement for data protection impact assessment pursuant to Article 35(4). Regulation (EU) 2016/679, Article 57, Article 57
Obligated entity
supervisory authority
Action required
establish
Deadline
Penalty
Obligation 14
Give advice on the processing operations referred to in Article 36(2). Regulation (EU) 2016/679, Article 57, Article 57
Obligated entity
supervisory authority
Action required
advise
Deadline
Penalty
Obligation 15
Encourage the drawing up of codes of conduct pursuant to Article 40(1). Regulation (EU) 2016/679, Article 57, Article 57
Obligated entity
supervisory authority
Action required
encourage
Deadline
Penalty
Obligation 16
Provide an opinion and approve codes of conduct which provide sufficient safeguards pursuant to Article 40(5). Regulation (EU) 2016/679, Article 57, Article 57
Obligated entity
supervisory authority
Action required
approve
Deadline
Penalty
Obligation 17
Encourage the establishment of data protection certification mechanisms and seals and marks pursuant to Article 42(1). Regulation (EU) 2016/679, Article 57, Article 57
Obligated entity
supervisory authority
Action required
encourage
Deadline
Penalty
Obligation 18
Approve the criteria of certification pursuant to Article 42(5). Regulation (EU) 2016/679, Article 57, Article 57
Obligated entity
supervisory authority
Action required
approve
Deadline
Penalty
Obligation 19
Carry out a periodic review of certifications issued in accordance with Article 42(7) where applicable. Regulation (EU) 2016/679, Article 57, Article 57
Obligated entity
supervisory authority
Action required
review
Deadline
periodic
Penalty
Obligation 20
Draft and publish the criteria for accreditation of a body for monitoring codes of conduct and of a certification body. Regulation (EU) 2016/679, Article 57, Article 57
Obligated entity
supervisory authority
Action required
draft
Deadline
Penalty
§ Frequently asked

Questions about Article 57

Who must comply with Article 57 of the GDPR? +
supervisory authority.
What does Article 57 of the GDPR require? +
monitor promote advise
What is the compliance deadline for GDPR Article 57? +
periodic; within a reasonable period
Need a cross-border briefing on GDPR Article 57?
Search Fontvera ↵
All EU obligation pages  ·  All GDPR articles