[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"framework:gdpr\u002F77":3},{"item":4,"lessons":16,"controls":54,"related":55},{"family":5,"item":6,"code":7,"title":8,"citations":9,"publisher":10,"summary_md":11,"official_text":12,"official_attribution":12,"official_url":13,"link_label":14,"note":12,"updated_at":15},"gdpr","77","Article 77","Right to lodge a complaint with a supervisory authority",9,"General Data Protection Regulation","**What it asks for.** Every individual has the right to lodge a complaint with a supervisory authority, in particular in the member state of their habitual residence, place of work or the place of the alleged infringement, if they consider that processing of their personal data infringes the regulation. The authority must inform the complainant of the progress and outcome, including the possibility of a judicial remedy under Article 78.\n\n**In practice.** Organisations inform individuals of this right in privacy notices and in responses to rights requests. Good complaint handling internally, with clear explanations and prompt resolution, reduces the number of complaints that escalate. Evidence includes notices that mention the right, internal complaint logs and records of correspondence with authorities when complaints are received.\n\n**Common gaps.** Responses to refused requests often fail to mention the right to complain. Internal complaints are also not tracked, so recurring issues go unaddressed.",null,"https:\u002F\u002Feur-lex.europa.eu\u002Flegal-content\u002FEN\u002FTXT\u002FHTML\u002F?uri=CELEX:32016R0679#art_77","Read the article on EUR-Lex","2026-10-18T15:18:43.663+00:00",{"total":9,"list":17},[18,22,26,30,34,38,42,46,50],{"slug":19,"title":20,"published_at":21},"italian-dpa-fines-la-patria-20000-for-mishandling-gdpr-data-subject-access-requests","Italian DPA Fines La Patria €20,000 for Mishandling GDPR Data Subject Access Requests","2026-09-21T14:21:19.953+00:00",{"slug":23,"title":24,"published_at":25},"courts-can-reject-profit-driven-data-protection-complaints-filed-by-associations","Courts Can Reject Profit-Driven Data Protection Complaints Filed by Associations","2026-09-17T10:20:22.664+00:00",{"slug":27,"title":28,"published_at":29},"court-strikes-down-900-gdpr-complaints-filed-for-profit-not-privacy","Court Strikes Down 900+ GDPR Complaints Filed for Profit, Not Privacy","2026-08-28T10:20:21.68+00:00",{"slug":31,"title":32,"published_at":33},"cjeu-rules-complainants-have-right-to-access-edpb-case-files","CJEU Rules Complainants Have Right to Access EDPB Case Files","2026-07-29T14:21:11.46+00:00",{"slug":35,"title":36,"published_at":37},"edpb-rules-standardized-complaints-cannot-be-dismissed-as-abuse-of-rights","EDPB Rules Standardized Complaints Cannot Be Dismissed as Abuse of Rights","2026-07-21T16:21:25.316+00:00",{"slug":39,"title":40,"published_at":41},"gdpr-complainants-have-right-to-timely-dpa-decisions-court-rules","GDPR Complainants Have Right to Timely DPA Decisions, Court Rules","2026-06-24T10:22:30.887+00:00",{"slug":43,"title":44,"published_at":45},"cjeu-rules-gdpr-complaint-rights-independent-of-judicial-remedies","CJEU Rules GDPR Complaint Rights Independent of Judicial Remedies","2026-06-23T08:20:40.421+00:00",{"slug":47,"title":48,"published_at":49},"cjeu-rules-dpas-must-handle-complaints-regardless-of-parallel-court-proceedings","CJEU Rules DPAs Must Handle Complaints Regardless of Parallel Court Proceedings","2026-06-22T08:20:39.126+00:00",{"slug":51,"title":52,"published_at":53},"cjeu-rules-gdpr-complaints-cannot-be-blocked-by-parallel-judicial-proceedings","CJEU Rules GDPR Complaints Cannot Be Blocked by Parallel Judicial Proceedings","2026-06-19T14:21:07.796+00:00",[],[56,61,66,72,76,81,86,90],{"family":5,"item":57,"code":58,"title":59,"together":60},"57","Article 57(4)","Tasks",7,{"family":62,"item":63,"code":64,"title":64,"together":65},"itil","overview","ITIL",6,{"family":67,"item":68,"code":69,"title":70,"together":71},"iso","27701","ISO\u002FIEC 27701","ISO\u002FIEC 27701: Privacy information management systems",5,{"family":5,"item":73,"code":74,"title":75,"together":71},"78","Article 78","Right to an effective judicial remedy against a supervisory authority",{"family":77,"item":78,"code":79,"title":80,"together":71},"cis","17","Control 17","Incident Response Management",{"family":77,"item":82,"code":83,"title":84,"together":85},"14","Control 14","Security Awareness and Skills Training",3,{"family":5,"item":87,"code":88,"title":89,"together":85},"79","Article 79","Right to an effective judicial remedy against a controller or processor",{"family":91,"item":92,"code":93,"title":94,"together":85},"nist-800-53","ir-7","IR-7","Incident Response Assistance"]