Source: OJ L 119, 4.5.2016, pp. 1–88Consolidated text

Current language: EN

Article 65 Dispute resolution by the Board


Summary What does Article 65 of the GDPR regulation say?

This article establishes the mechanism by which the European Data Protection Board (the Board) steps in to issue binding decisions when the consistency mechanism breaks down in individual cases.

It directly follows from Article 60 and Article 64, acting as an escalation route when supervisory authorities cannot agree — for example, when a lead supervisory authority rejects a reasoned objection from another supervisory authority, when there is a dispute over which authority has competence, or when an authority fails to follow a Board opinion.

The article also sets out the procedural steps that follow once a binding decision is issued, including how final decisions are adopted and published.

Important points:

  • The Board is required to adopt a binding decision — by a two-thirds majority within one month, extendable by a further month — when disagreements arise between supervisory authorities that cannot be resolved through normal cooperation.
  • Supervisory authorities concerned are prohibited from adopting their own decision on the subject matter while the Board's decision-making process is ongoing.
  • The lead supervisory authority or the authority with which a complaint was lodged must adopt its final decision on the basis of the Board's binding decision within one month of being notified of it.

Springlex's summary of the article is a reading aid, not a substitute for the legal text.

    1. In order to ensure the correct and consistent application of this Regulation in individual cases, the Board shall adopt a binding decision in the following cases:

      1. ▼C1

        where, in a case referred to in Article 60(4), a supervisory authority concerned has raised a relevant and reasoned objection to a draft decision of the lead supervisory authority and the lead supervisory authority has not followed the objection or has rejected such an objection as being not relevant or reasoned. The binding decision shall concern all the matters which are the subject of the relevant and reasoned objection, in particular whether there is an infringement of this Regulation;

      2. where there are conflicting views on which of the supervisory authorities concerned is competent for the main establishment;

      3. where a competent supervisory authority does not request the opinion of the Board in the cases referred to in Article 64(1), or does not follow the opinion of the Board issued under Article 64. In that case, any supervisory authority concerned or the Commission may communicate the matter to the Board.

    1. The decision referred to in paragraph 1 shall be adopted within one month from the referral of the subject-matter by a two-thirds majority of the members of the Board. That period may be extended by a further month on account of the complexity of the subject-matter. The decision referred to in paragraph 1 shall be reasoned and addressed to the lead supervisory authority and all the supervisory authorities concerned and binding on them.

    1. Where the Board has been unable to adopt a decision within the periods referred to in paragraph 2, it shall adopt its decision within two weeks following the expiration of the second month referred to in paragraph 2 by a simple majority of the members of the Board. Where the members of the Board are split, the decision shall by adopted by the vote of its Chair.

    1. The supervisory authorities concerned shall not adopt a decision on the subject matter submitted to the Board under paragraph 1 during the periods referred to in paragraphs 2 and 3.

    1. The Chair of the Board shall notify, without undue delay, the decision referred to in paragraph 1 to the supervisory authorities concerned. It shall inform the Commission thereof. The decision shall be published on the website of the Board without delay after the supervisory authority has notified the final decision referred to in paragraph 6.

    1. The lead supervisory authority or, as the case may be, the supervisory authority with which the complaint has been lodged shall adopt its final decision on the basis of the decision referred to in paragraph 1 of this Article, without undue delay and at the latest by one month after the Board has notified its decision. The lead supervisory authority or, as the case may be, the supervisory authority with which the complaint has been lodged, shall inform the Board of the date when its final decision is notified respectively to the controller or the processor and to the data subject. The final decision of the supervisory authorities concerned shall be adopted under the terms of Article 60(7), (8) and (9). The final decision shall refer to the decision referred to in paragraph 1 of this Article and shall specify that the decision referred to in that paragraph will be published on the website of the Board in accordance with paragraph 5 of this Article. The final decision shall attach the decision referred to in paragraph 1 of this Article.

We're continuously improving our platform to serve you better.

Your feedback matters! Let us know how we can improve.

Found a bug?

Springflod is a Swedish boutique consultancy firm specialising in cyber security within the financial services sector.

We offer professional services concerning information security governance, risk and compliance.

Crafted with ❤️ by Springflod