Article 59 GDPR - Activity reports
Relevant Recitals
No relevant recitals listed.
Frequently Asked Questions
Short answers to common questions about this provision. They are general information and not legal advice.
Each supervisory authority must draw up an annual report on its activities. The report may include a list of the types of infringement notified and the types of measures taken in accordance with Article 58(2), so the content beyond the activity account is partly discretionary.
The report must be transmitted to the national parliament, the government and other authorities as designated by Member State law. It must additionally be made available to the public, to the Commission and to the Board.
No. Article 59 states only that the report may include a list of types of infringement notified and types of measures taken, which points to aggregated categories rather than named cases. Whether and how individual cases are described is left to the authority, subject to any requirements of Member State law.
Transmission of the report to the parliament and government is a form of public accountability that operates alongside the guarantee of complete independence in Article 52(1). The report informs those bodies without giving them any power of direction, since Article 52(2) prohibits external influence on the performance of the authority's tasks.
Point (u) of Article 57(1) obliges each authority to keep internal records of infringements and of measures taken in accordance with Article 58(2). Those records supply the material from which the optional list of types of infringement and types of measures in the annual report can be drawn.