• EN - English
  • FR - français
Parliamentary question - E-004117/2018(ASW)Parliamentary question

Answer given by Ms Jourová on behalf of the European Commission

The General Data Protection Regulation (GDPR)[1] grants individuals several remedies in case of an alleged infringement of their rights, such as the right to lodge a complaint with a supervisory authority or to bring proceedings before the courts.

They may mandate a not-for-profit body to exercise their rights on their behalf. Additionally, Member States may provide that a not-for-profit organisation, which has been properly constituted in accordance with the national law, pursues public interests and is active in the field of the data protection, may lodge a complaint and start proceedings in courts independently of a data subject’s mandate.

Except where this is allowed pursuant to Article 80 GDPR, other persons wishing to act independently of a data subject’s mandate do not have standing to exercise the rights granted to individuals under the GDPR.

The Commission does not currently have any overview of the illegal practices mentioned by the Honourable Member. Article 97 of the regulation provides that by May 2020 the Commission shall submit a report on the evaluation and review of the regulation. The Commission will assess during the coming year of application whether there is a need to evaluate such practices in its forthcoming report on the application of the new rules.

Under the GDPR, the promotion of public awareness in relation to the processing of personal data is primarily a task for the independent national supervisory authorities[2].

The Commission has undertaken several actions to ensure appropriate information is disseminated in all the Member States about the new rules[3]. The Commission has also issued a call for proposals for an amount of EUR 2 million to support data protection authorities in their awareness-raising activities[4].

Last updated: 5 October 2018
Legal notice - Privacy policy