Article 80 of GDPR: Representation of Data Subjects
Article 80 of GDPR grants the right to data subjects to mandate a non-for-profit organization or an association active in the field of data protection to file a complaint and exercise GDPR rights on its behalf.
Mandating of not-for-profit organizations or associations (Article 80(1) GDPR)
GDPR allows data subjects to mandate non-for-profit organizations or associations duly constituted under the laws of an EU member state to:
- exercise his or her GDPR rights relating to data protection
- file the necessary complaints on behalf of the data subject
- Receive compensation on behalf of the data subject
Rights given to not-for-profit organizations and associations (Article 80(2) GDPR)
GDPR also provides some additional rights to the non-for-profit organizations and associations operating in the public interest and particularly in the area of data protection.
They have the right to file a complaint with the supervisory authority and to exercise rights before the courts when it considers that the rights of data subjects have been infringed as a result of personal data processing.
Recitals applicable to Article 80 of GDPR
Relevant Recitals: 142
GDPR Regulation article-by-article overview
Read our comprehensive overview of the GDPR Regulation, article by article, where we summarize each of the 99 articles contained in GDPR to give you a complete understanding of its content.
Cited Legislation in Article 80 or relevant recitals
GDPR Text: Article 80 of GDPR and Relevant Recitals
GDPR Text Source: EUR-Lex
Official GDPR Text: General Data Protection Regulation
Official GDPR Title: REGULATION (EU) 2016/679 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation), corrected by Corrigendum, OJL 127, 23.5.2018, p. 2 ((EU) 2016/679)