Article 78 GDPR (Right To An Effective Judicial Remedy Against A Supervisory Authority)

Article 78 of GDPR: Right To An Effective Judicial Remedy Against A Supervisory Authority

Article 78 of GDPR provides for a right to data subjects to contest the decisions of the supervisory authority before the courts.

Judicial remedy against a supervisory authority decision (Article 78(1) GDPR)

GDPR provides the right to each data subject, whether a physical person or a legal person, to contest a legally binding decision of the supervisory authority.

Judicial remedy when the supervisory authority does not act (Article 78(2) GDPR)

GDPR further provides the right to each data subject to seek a judicial remedy in the following situations:

  1. When the supervisory authority does not handle a complaint
  2. When the supervisory authority does not provide the data subject with the progress or outcome of a complaint within three months

Competent courts (Article 78(3) GDPR)

Legal recourse against a supervisory authority will be handled by the judicial courts located in the EU state where the supervisory authority is located.

Decisions of the supervisory authority preceded by an opinion of the EDPB (Article 78(4) GDPR)

In the event a decision of the supervisory authority is contested and such decision was preceded by an opinion of the European Data Protection Board or a decision based on the consistency mechanism, then the supervisory authority must forward the opinion or decision to the Court for assessment.

Recitals applicable to Article 78 of GDPR

Relevant Recitals: 141, 143

GDPR Regulation article-by-article overview

Read our comprehensive overview of the GDPR Regulation, article by article, where we summarize each of the 99 articles contained in GDPR to give you a complete understanding of its content.

Cited Legislation in Article 78 or relevant recitals

Charter of Fundamental Rights of the European

Treaty on the Functioning of the European Union

GDPR Text: Article 78 of GDPR and Relevant Recitals

GDPR Text Source: EUR-Lex

Official GDPR Text: General Data Protection Regulation 

Official GDPR Title: REGULATION (EU) 2016/679 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation), corrected by Corrigendum, OJL 127, 23.5.2018, p. 2 ((EU) 2016/679)