General Data Protection Regulation (GDPR) · Article 57(4)

Tasks

General Data Protection Regulation · cited in 8 of our lessons

Explanation

What it asks for. Article 57 lists the tasks of each supervisory authority, such as monitoring and enforcing the regulation, promoting awareness, handling complaints and conducting investigations. Paragraph 4 provides that where requests are manifestly unfounded or excessive, in particular because of their repetitive character, the authority may charge a reasonable fee based on administrative costs or refuse to act, bearing the burden of demonstrating that the request is manifestly unfounded or excessive.

In practice. For organisations, the article mainly explains what authorities do and why they may contact them, through complaints, investigations or awareness work. Understanding these tasks helps in preparing for contact and in using guidance the authority publishes. Evidence of readiness includes a regulator contact procedure and current documentation that can be shared.

Common gaps. Organisations sometimes overlook the guidance and decisions their authority publishes, which often show its priorities. Paragraph 4 concerns requests to the authority and does not by itself govern how controllers handle individuals' requests, which falls under Article 12.

Lessons that cite it

Real incidents where this item mattered.