Source: OJ L 119, 4.5.2016, pp. 1–88Consolidated text

Current language: EN

Article 66 Urgency procedure


Summary What does Article 66 of the GDPR regulation say?

This article establishes an urgency procedure that operates as an explicit exception to the standard consistency mechanism set out in Articles 63, 64, and 65, as well as the cooperation procedure in Article 60.

It allows supervisory authorities to bypass the usual coordinated process when there is an urgent need to protect the rights and freedoms of data subjects, enabling faster unilateral action and accelerated Board decision-making.

Important points:

  • Supervisory authorities may immediately adopt provisional measures on their own territory in exceptional circumstances, valid for no more than three months, and must notify the other supervisory authorities concerned, the Board, and the Commission without delay.
  • Either the supervisory authority that has already taken provisional measures, or any other supervisory authority where a competent authority has failed to act, may request an urgent opinion or binding decision from the Board.
  • The Board is required to adopt such urgent opinions or binding decisions within two weeks by simple majority, compared to the longer timelines that apply under the standard procedure.

Springlex's summary of the article is a reading aid, not a substitute for the legal text.

    1. In exceptional circumstances, where a supervisory authority concerned considers that there is an urgent need to act in order to protect the rights and freedoms of data subjects, it may, by way of derogation from the consistency mechanism referred to in Articles 63, 64 and 65 or the procedure referred to in Article 60, immediately adopt provisional measures intended to produce legal effects on its own territory with a specified period of validity which shall not exceed three months. The supervisory authority shall, without delay, communicate those measures and the reasons for adopting them to the other supervisory authorities concerned, to the Board and to the Commission.

    1. Where a supervisory authority has taken a measure pursuant to paragraph 1 and considers that final measures need urgently be adopted, it may request an urgent opinion or an urgent binding decision from the Board, giving reasons for requesting such opinion or decision.

    1. Any supervisory authority may request an urgent opinion or an urgent binding decision, as the case may be, from the Board where a competent supervisory authority has not taken an appropriate measure in a situation where there is an urgent need to act, in order to protect the rights and freedoms of data subjects, giving reasons for requesting such opinion or decision, including for the urgent need to act.

    1. By derogation from Article 64(3) and Article 65(2), an urgent opinion or an urgent binding decision referred to in paragraphs 2 and 3 of this Article shall be adopted within two weeks by simple majority of the members of the Board.

We're continuously improving our platform to serve you better.

Your feedback matters! Let us know how we can improve.

Found a bug?

Springflod is a Swedish boutique consultancy firm specialising in cyber security within the financial services sector.

We offer professional services concerning information security governance, risk and compliance.

Crafted with ❤️ by Springflod