Source: OJ L 119, 4.5.2016, pp. 1–88Consolidated text

Current language: EN

Article 77 Right to lodge a complaint with a supervisory authority


Summary What does Article 77 of the GDPR regulation say?

This article establishes the right of data subjects to lodge a complaint with a supervisory authority when they believe their personal data has been processed in a way that infringes the GDPR.

It is a key enforcement-facing right for individuals, sitting within the broader framework of data subject remedies.

Importantly, this right exists without prejudice to any other administrative or judicial remedy, meaning it does not replace or limit other avenues available to the data subject.

The article also places an obligation on the supervisory authority to keep the complainant informed throughout the process.

Important points:

  • Data subjects have the right to lodge a complaint with a supervisory authority in the Member State of their habitual residence, place of work, or place of the alleged infringement.
  • This right exists alongside, and does not replace, any other administrative or judicial remedy available to the data subject.
  • Supervisory authorities are required to inform the complainant of the progress and outcome of the complaint, including the possibility of a judicial remedy under Article 78.

Springlex's summary of the article is a reading aid, not a substitute for the legal text.

    1. Without prejudice to any other administrative or judicial remedy, every data subject shall have the right to lodge a complaint with a supervisory authority, in particular in the Member State of his or her habitual residence, place of work or place of the alleged infringement if the data subject considers that the processing of personal data relating to him or her infringes this Regulation.

    1. The supervisory authority with which the complaint has been lodged shall inform the complainant on the progress and the outcome of the complaint including the possibility of a judicial remedy pursuant to Article 78.

We're continuously improving our platform to serve you better.

Your feedback matters! Let us know how we can improve.

Found a bug?

Springflod is a Swedish boutique consultancy firm specialising in cyber security within the financial services sector.

We offer professional services concerning information security governance, risk and compliance.

Crafted with ❤️ by Springflod