Art. 68 GDPR – European Data Protection Board
- The European Data Protection Board (the ‘Board’) is hereby established as a body of the Union and shall have legal personality.
- The Board shall be represented by its Chair.
- The Board shall be composed of the head of one supervisory authority of each Member State and of the European Data Protection Supervisor, or their respective representatives.
- Where in a Member State more than one supervisory authority is responsible for monitoring the application of the provisions pursuant to this Regulation, a joint representative shall be appointed in accordance with that Member State’s law.
- 1The Commission shall have the right to participate in the activities and meetings of the Board without voting right. 2The Commission shall designate a representative. 3The Chair of the Board shall communicate to the Commission the activities of the Board.
- In the cases referred to in Article 65, the European Data Protection Supervisor shall have voting rights only on decisions which concern principles and rules applicable to the Union institutions, bodies, offices and agencies which correspond in substance to those of this Regulation.
Related Recitals
Frequently Asked Questions about Article 68
+What is the European Data Protection Board (EDPB)?
Article 68 establishes the EDPB as an independent EU body made up of the heads of national supervisory authorities and the European Data Protection Supervisor.
+What does the EDPB do?
The EDPB ensures consistent application of the GDPR, issues guidelines and opinions, and resolves disputes between national supervisory authorities.
+ Who sits on the European Data Protection Board?
It comprises the head of one supervisory authority per member state and the European Data Protection Supervisor, with the Commission participating without voting rights.