European Data Protection Supervisor

On 11th December 2018 regulation (EU) 2018/1725 on the protection of natural persons with regard to the processing of personal data by the Union institutions, bodies, offices and agencies and on the free movement of such data, and repealing Regulation (ES) No 45/2001 and Decision No 1247/2002/ES (hereinafter referred to as “regulation 2018/1725”) shall apply.

The European Data Protection Supervisor (hereinafter referred to as “EDPS”) is independent supervisory authority, which shall be responsible for ensuring that the fundamental rights and freedoms of natural persons, and in particular their rights to data protection, are respected by Union institutions and bodies. The EDPS shall be responsible for monitoring and ensuring the application of the provisions of the regulation 2018/1725 and of any other Union act relating to the protection of the fundamental rights and freedoms of natural persons with regard to the processing of personal data by a Union institution or body, and for advising Union institutions and bodies and data subjects on all matters concerning the processing of personal data.

Data subject rights under regulation 2018/1725:

  • Right of access by the data subject,
  • Right to rectification,
  • Right to erasure (‘right to be forgotten’),
  • Right to restriction of processing,
  • Right to data portability,
  • Right to object (and automated individual decision-making, including profiling).

Every data subject shall have a right to lodge a complaint with EDPS if the data subject considers that the processing of personal data relating to him or her infringes regulation 2018/1725. EDPS shall inform the complainant of the progress and the outcome of the complaint, including of the possibility of a judicial remedy pursuant to article 64 of regulation 2018/1725. If the EDPS does not handle the complaint or does not inform the data subject within three months on the progress or outcome of the complaint, the EDPS shall be deemed to have adopted a negative decision. The performance of the tasks of EDPS shall be free of charge for the data subject.

Find more information on EDPS website https://edps.europa.eu/edps-homepage_en