[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"framework:gdpr\u002F78":3},{"item":4,"lessons":16,"controls":38,"related":39},{"family":5,"item":6,"code":7,"title":8,"citations":9,"publisher":10,"summary_md":11,"official_text":12,"official_attribution":12,"official_url":13,"link_label":14,"note":12,"updated_at":15},"gdpr","78","Article 78","Right to an effective judicial remedy against a supervisory authority",5,"General Data Protection Regulation","**What it asks for.** Every natural or legal person has the right to an effective judicial remedy against a legally binding decision of a supervisory authority concerning them. Individuals also have this right where the competent authority does not handle a complaint or does not inform them within three months of its progress or outcome. Proceedings are brought before the courts of the member state where the authority is established.\n\n**In practice.** For organisations, the article means binding decisions against them, such as orders or fines, can be challenged in court. Good practice is to keep a complete record of all correspondence with the authority and of the measures in place, as this supports any challenge. Legal advice is normally needed for proceedings.\n\n**Common gaps.** Organisations sometimes respond to authority investigations informally and later lack the record needed to contest a decision. Deadlines for appeals are set by national procedural law and can be short.",null,"https:\u002F\u002Feur-lex.europa.eu\u002Flegal-content\u002FEN\u002FTXT\u002FHTML\u002F?uri=CELEX:32016R0679#art_78","Read the article on EUR-Lex","2026-10-18T15:18:43.663+00:00",{"total":9,"list":17},[18,22,26,30,34],{"slug":19,"title":20,"published_at":21},"edpb-rules-standardized-complaints-cannot-be-dismissed-as-abuse-of-rights","EDPB Rules Standardized Complaints Cannot Be Dismissed as Abuse of Rights","2026-07-21T16:21:25.316+00:00",{"slug":23,"title":24,"published_at":25},"gdpr-complainants-have-right-to-timely-dpa-decisions-court-rules","GDPR Complainants Have Right to Timely DPA Decisions, Court Rules","2026-06-24T10:22:30.887+00:00",{"slug":27,"title":28,"published_at":29},"cjeu-rules-gdpr-complaint-rights-independent-of-judicial-remedies","CJEU Rules GDPR Complaint Rights Independent of Judicial Remedies","2026-06-23T08:20:40.421+00:00",{"slug":31,"title":32,"published_at":33},"cjeu-rules-dpas-must-handle-complaints-regardless-of-parallel-court-proceedings","CJEU Rules DPAs Must Handle Complaints Regardless of Parallel Court Proceedings","2026-06-22T08:20:39.126+00:00",{"slug":35,"title":36,"published_at":37},"cjeu-rules-gdpr-complaints-cannot-be-blocked-by-parallel-judicial-proceedings","CJEU Rules GDPR Complaints Cannot Be Blocked by Parallel Judicial Proceedings","2026-06-19T14:21:07.796+00:00",[],[40,44,48,54,60,64,69,73],{"family":5,"item":41,"code":42,"title":43,"together":9},"57","Article 57(4)","Tasks",{"family":5,"item":45,"code":46,"title":47,"together":9},"77","Article 77","Right to lodge a complaint with a supervisory authority",{"family":49,"item":50,"code":51,"title":52,"together":53},"cis","17","Control 17","Incident Response Management",4,{"family":55,"item":56,"code":57,"title":58,"together":59},"iso","27701","ISO\u002FIEC 27701","ISO\u002FIEC 27701: Privacy information management systems",3,{"family":61,"item":62,"code":63,"title":63,"together":59},"itil","overview","ITIL",{"family":65,"item":66,"code":67,"title":68,"together":59},"nist-800-53","ir-7","IR-7","Incident Response Assistance",{"family":5,"item":70,"code":71,"title":72,"together":59},"79","Article 79","Right to an effective judicial remedy against a controller or processor",{"family":65,"item":74,"code":75,"title":76,"together":77},"ir-6","IR-6","Incident Reporting",2]