Skip to content

Supervisory Authority

What is Supervisory Authority?

An independent public authority established by an EU member state responsible for monitoring the application of GDPR within its territory. Supervisory authorities have investigative, corrective, and advisory powers.

Privacy

Each of these is named in at least one of the same controls as supervisory authority. The number is how many controls name both.

What the standards actually require on supervisory authority

Requirements naming supervisory authority across 6 standards, quoted from the control text.

GDPR13 controls

The controller and the processor and, where applicable, their representatives must cooperate, on request, with the supervisory authority in the performance of its tasks.

GDPR-Art.31 · Cooperation with the supervisory authority

Supervisory authority for police information. Article 71 establishes, within the Chamber of Representatives, the independent Supervisory Body for Police Information (Controleorgaan op de politionele informatie / Organe de controle de l'information policiere) o...

BE-DPA-19 · Supervisory authority for police information

Controllers and processors must cooperate with the ANSPDCP, provide requested information within set deadlines and implement corrective measures imposed by the authority. Obstruction of supervisory tasks is a contravention.

RO-LAW190-007 · Compliance with the National Supervisory Authority (ANSPDCP)

The supervisory authority under GDPR Art. 51 is the Croatian Personal Data Protection Agency (AZOP), an independent state body answerable to the Croatian Parliament, seated in Zagreb.

HR-GDPR-Art.4 · Supervisory Authority (AZOP)

Submit the code to the competent supervisory authority (and EDPB for transnational codes) for approval, registration and publication.

RDCOC-APP-01 · Supervisory Authority / EDPB Approval

Latvia PDPL supervisory authority regime. Section 35 Powers of the Data State Inspectorate - DVI investigative + corrective + authorisation + advisory powers (GDPR Article 58 implementation): investigations (notifications + audits + on-site inspection + access...

LV-PDPL-Supervisory-Authority-Data-State-Inspectorate-DVI-Powers-S35-Codes-of-Conduct-S55-Certification-S45-Complaints-S40 · Latvia PDPL Supervisory Authority + DVI Powers + S.35 + Codes of Conduct + Certification + Complaints

Questions people ask about supervisory authority

What is Supervisory Authority?
An independent public authority established by an EU member state responsible for monitoring the application of GDPR within its territory. Supervisory authorities have investigative, corrective, and advisory powers.
Why is Supervisory Authority important for compliance?
Supervisory Authority is a key concept in Privacy. Understanding supervisory authority helps organizations meet regulatory requirements, reduce risk, and demonstrate due diligence during audits. Our compliance platform maps 686 frameworks with 311K cross-framework control mappings.
Which compliance frameworks address Supervisory Authority?
Supervisory Authority appears in the requirement text of GDPR, Belgium Data Protection Act (Wet van 30 juli 2018, Loi du 30 juillet 2018), Romania Law No. 190/2018 on Data Protection Measures (GDPR Implementation), Act on the Implementation of the General Data Protection Regulation (OG 42/2018), Code of Conduct on Data Protection for Research (GDPR Article 40). Across these standards we have identified 30 controls that name it directly, each linked to the control text on the compliance platform.
Where can I learn more about Supervisory Authority?
Explore our compliance framework pages to see how supervisory authority applies across different standards and regulations. Our implementation guides provide step-by-step guidance, and the compliance platform offers AI-powered analysis of how this concept maps across 686 frameworks.

See how Supervisory Authority applies across compliance frameworks

Our platform maps 686 frameworks with 311K cross-framework control mappings. Explore how this concept is addressed across standards.

Written and maintained by Gerard Blokdyk, The Art of Service.