Art. 97 GDPR – Commission reports
- 1By 25 May 2020 and every four years thereafter, the Commission shall submit a report on the evaluation and review of this Regulation to the European Parliament and to the Council. 2The reports shall be made public.
- In the context of the evaluations and reviews referred to in paragraph 1, the Commission shall examine, in particular, the application and functioning of:
- Chapter V on the transfer of personal data to third countries or international organisations with particular regard to decisions adopted pursuant to Article 45(3) of this Regulation and decisions adopted on the basis of Article 25(6) of Directive 95/46/EC;
- Chapter VII on cooperation and consistency.
- For the purpose of paragraph 1, the Commission may request information from Member States and supervisory authorities.
- In carrying out the evaluations and reviews referred to in paragraphs 1 and 2, the Commission shall take into account the positions and findings of the European Parliament, of the Council, and of other relevant bodies or sources.
- The Commission shall, if necessary, submit appropriate proposals to amend this Regulation, in particular taking into account of developments in information technology and in the light of the state of progress in the information society.
Related Recitals
Frequently Asked Questions about Article 97
+Does the European Commission review the GDPR?
Yes. Article 97 requires the Commission to report on the evaluation and review of the GDPR periodically, with the first report due by 25 May 2020.
+How often is the GDPR evaluated?
The Commission must submit reports at least every four years, examining areas such as international transfers and cooperation between supervisory authorities.
+ Can the GDPR be amended after review?
Yes. Based on its evaluations, the Commission may submit proposals to amend the GDPR if appropriate.