[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"framework:gdpr\u002F57":3},{"item":4,"lessons":16,"controls":50,"related":51},{"family":5,"item":6,"code":7,"title":8,"citations":9,"publisher":10,"summary_md":11,"official_text":12,"official_attribution":12,"official_url":13,"link_label":14,"note":12,"updated_at":15},"gdpr","57","Article 57(4)","Tasks",8,"General Data Protection Regulation","**What it asks for.** Article 57 lists the tasks of each supervisory authority, such as monitoring and enforcing the regulation, promoting awareness, handling complaints and conducting investigations. Paragraph 4 provides that where requests are manifestly unfounded or excessive, in particular because of their repetitive character, the authority may charge a reasonable fee based on administrative costs or refuse to act, bearing the burden of demonstrating that the request is manifestly unfounded or excessive.\n\n**In practice.** For organisations, the article mainly explains what authorities do and why they may contact them, through complaints, investigations or awareness work. Understanding these tasks helps in preparing for contact and in using guidance the authority publishes. Evidence of readiness includes a regulator contact procedure and current documentation that can be shared.\n\n**Common gaps.** Organisations sometimes overlook the guidance and decisions their authority publishes, which often show its priorities. Paragraph 4 concerns requests to the authority and does not by itself govern how controllers handle individuals' requests, which falls under Article 12.",null,"https:\u002F\u002Feur-lex.europa.eu\u002Flegal-content\u002FEN\u002FTXT\u002FHTML\u002F?uri=CELEX:32016R0679#art_57","Read the article on EUR-Lex","2026-10-18T15:18:43.663+00:00",{"total":9,"list":17},[18,22,26,30,34,38,42,46],{"slug":19,"title":20,"published_at":21},"courts-can-reject-profit-driven-data-protection-complaints-filed-by-associations","Courts Can Reject Profit-Driven Data Protection Complaints Filed by Associations","2026-09-17T10:20:22.664+00:00",{"slug":23,"title":24,"published_at":25},"court-strikes-down-900-gdpr-complaints-filed-for-profit-not-privacy","Court Strikes Down 900+ GDPR Complaints Filed for Profit, Not Privacy","2026-08-28T10:20:21.68+00:00",{"slug":27,"title":28,"published_at":29},"irish-high-court-upholds-dpc-authority-to-address-systemic-data-issues-from-individual-complaints","Irish High Court Upholds DPC Authority to Address Systemic Data Issues From Individual Complaints","2026-08-26T10:20:54.906+00:00",{"slug":31,"title":32,"published_at":33},"edpb-rules-standardized-complaints-cannot-be-dismissed-as-abuse-of-rights","EDPB Rules Standardized Complaints Cannot Be Dismissed as Abuse of Rights","2026-07-21T16:21:25.316+00:00",{"slug":35,"title":36,"published_at":37},"gdpr-complainants-have-right-to-timely-dpa-decisions-court-rules","GDPR Complainants Have Right to Timely DPA Decisions, Court Rules","2026-06-24T10:22:30.887+00:00",{"slug":39,"title":40,"published_at":41},"cjeu-rules-gdpr-complaint-rights-independent-of-judicial-remedies","CJEU Rules GDPR Complaint Rights Independent of Judicial Remedies","2026-06-23T08:20:40.421+00:00",{"slug":43,"title":44,"published_at":45},"cjeu-rules-dpas-must-handle-complaints-regardless-of-parallel-court-proceedings","CJEU Rules DPAs Must Handle Complaints Regardless of Parallel Court Proceedings","2026-06-22T08:20:39.126+00:00",{"slug":47,"title":48,"published_at":49},"cjeu-rules-gdpr-complaints-cannot-be-blocked-by-parallel-judicial-proceedings","CJEU Rules GDPR Complaints Cannot Be Blocked by Parallel Judicial Proceedings","2026-06-19T14:21:07.796+00:00",[],[52,57,62,67,71,76,82,86],{"family":5,"item":53,"code":54,"title":55,"together":56},"77","Article 77","Right to lodge a complaint with a supervisory authority",7,{"family":58,"item":59,"code":60,"title":60,"together":61},"itil","overview","ITIL",5,{"family":63,"item":64,"code":65,"title":66,"together":61},"cis","17","Control 17","Incident Response Management",{"family":5,"item":68,"code":69,"title":70,"together":61},"78","Article 78","Right to an effective judicial remedy against a supervisory authority",{"family":72,"item":73,"code":74,"title":75,"together":61},"iso","27701","ISO\u002FIEC 27701","ISO\u002FIEC 27701: Privacy information management systems",{"family":77,"item":78,"code":79,"title":80,"together":81},"nist-800-53","ir-7","IR-7","Incident Response Assistance",3,{"family":5,"item":83,"code":84,"title":85,"together":81},"79","Article 79","Right to an effective judicial remedy against a controller or processor",{"family":5,"item":87,"code":88,"title":89,"together":90},"83","Article 83","General conditions for imposing administrative fines",2]