Art. 59 GDPR – Activity reports
1Each supervisory authority shall draw up an annual report on its activities, which may include a list of types of infringement notified and types of measures taken in accordance with Article 58(2). 2Those reports shall be transmitted to the national parliament, the government and other authorities as designated by Member State law. 3They shall be made available to the public, to the Commission and to the Board.
Related Recitals
(117) Establishment of Supervisory Authorities
(118) Monitoring of the Supervisory Authorities
Frequently Asked Questions about Article 59
+ What are supervisory authority activity reports?
Article 59 requires each supervisory authority to produce an annual report on its activities, which may include types of breaches and corrective measures taken.
+Are GDPR enforcement reports public?
Yes. Activity reports are transmitted to national bodies and made available to the public, the Commission, and the European Data Protection Board.
+ Why do supervisory authorities publish reports?
Reports increase transparency and accountability, helping the public and organisations understand enforcement trends and the authority’s priorities.