Article 57 Tasks
United Kingdom
Without prejudice to other tasks set out under this Regulation, F1the F2Commission must:
monitor and enforce the application of this Regulation;
promote public awareness and understanding of the risks, rules, safeguards and rights in relation to processing. Activities addressed specifically to children shall receive specific attention;
advise F3Parliament, the government, and other institutions and bodies on legislative and administrative measures relating to the protection of natural persons' rights and freedoms with regard to processing;
promote the awareness of controllers and processors of their obligations under this Regulation;
upon request, provide information to any data subject concerning the exercise of their rights under this Regulation and, if appropriate, cooperate with F4foreign designated authorities to that end;
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
conduct investigations on the application of this Regulation, including on the basis of information received from F7a foreign designated authority or other public authority;
monitor relevant developments, insofar as they have an impact on the protection of personal data, in particular the development of information and communication technologies and commercial practices;
adopt standard contractual clauses referred to in Article 28(8) and F8issue standard data protection clauses referred to in point (d) of Article 46(2);
establish and maintain a list in relation to the requirement for data protection impact assessment pursuant to Article 35(4);
give advice on the processing operations referred to in Article 36(2);
encourage the drawing up of codes of conduct pursuant to Article 40(1) and provide an opinion and approve such codes of conduct F9... pursuant to Article 40(5);
encourage the establishment of data protection certification mechanisms and of data protection seals and marks pursuant to Article 42(1), and approve the criteria of certification pursuant to Article 42(5);
where applicable, carry out a periodic review of certifications issued in accordance with Article 42(7);
maintain a public register of certification mechanisms and data protection seals and marks pursuant to Article 42(8) and of controllers or processors established in third countries and certified pursuant to Article 42(7);
draft and publish the requirements for accreditation of a body for monitoring codes of conduct pursuant to Article 41 and of a certification body pursuant to Article 43;
conduct the accreditation of a body for monitoring codes of conduct pursuant to Article 41 and of a certification body pursuant to Article 43;
authorise contractual clauses and provisions referred to in Article 46(3);
approve binding corporate rules pursuant to Article 47;
provide authorisation required under regulations made under Article 47A;
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
keep internal records of infringements of this Regulation and of measures taken in accordance with Article 58(2); and
fulfil any other tasks related to the protection of personal data.
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
Annotations
Textual amendments
- F1
Words in Art. 57(1) substituted (31.12.2020) by The Data Protection, Privacy and Electronic Communications (Amendments etc) (EU Exit) Regulations 2019 (S.I. 2019/419), reg. 1(2), Sch. 1 para. 52(2)(a) (with reg. 5); 2020 c. 1, Sch. 5 para. 1(1)
- F2
Word in Art. 57(1) substituted (30.9.2026) by The Data (Use and Access) Act 2025 (Consequential Amendments and Transitional Provision) Regulations 2026 (S.I. 2026/386), reg. 1(2), Sch. 3 para. 41(3)(4)(z1)(i); S.I. 2026/1015, reg. 2(c)
- F3
Word in Art. 57(1)(c) substituted (31.12.2020) by The Data Protection, Privacy and Electronic Communications (Amendments etc) (EU Exit) Regulations 2019 (S.I. 2019/419), reg. 1(2), Sch. 1 para. 52(2)(b) (with reg. 5); 2020 c. 1, Sch. 5 para. 1(1)
- F4
Words in Art. 57(1)(e) substituted (31.12.2020) by The Data Protection, Privacy and Electronic Communications (Amendments etc) (EU Exit) Regulations 2019 (S.I. 2019/419), reg. 1(2), Sch. 1 para. 52(2)(c) (with reg. 5); 2020 c. 1, Sch. 5 para. 1(1)
- F5
Art. 57(1)(f) omitted (19.6.2026) by virtue of Data (Use and Access) Act 2025 (c. 18), ss. 103(5)(a), 142(1); S.I. 2026/82, reg. 3(a) (with reg. 7)
- F6
Art. 57(1)(g) omitted (31.12.2020) by virtue of The Data Protection, Privacy and Electronic Communications (Amendments etc) (EU Exit) Regulations 2019 (S.I. 2019/419), reg. 1(2), Sch. 1 para. 52(2)(e) (with reg. 5, Sch. 1 para. 80); 2020 c. 1, Sch. 5 para. 1(1)
- F7
Words in Art. 57(1)(h) substituted (31.12.2020) by The Data Protection, Privacy and Electronic Communications (Amendments etc) (EU Exit) Regulations 2019 (S.I. 2019/419), reg. 1(2), Sch. 1 para. 52(2)(f) (with reg. 5); 2020 c. 1, Sch. 5 para. 1(1)
- F8
Words in Art. 57(1)(j) inserted (31.12.2020) by The Data Protection, Privacy and Electronic Communications (Amendments etc) (EU Exit) Regulations 2019 (S.I. 2019/419), reg. 1(2), Sch. 1 para. 52(2)(g) (with reg. 5); 2020 c. 1, Sch. 5 para. 1(1)
- F9
Words in Art. 57(1)(m) omitted (5.2.2026) by virtue of Data (Use and Access) Act 2025 (c. 18), s. 142(1), Sch. 9 para. 8(a) (with Sch. 9 Pt. 2); S.I. 2026/82, reg. 2(z11)
- F10
Art. 57(1)(oa) inserted (31.12.2020) by The Data Protection, Privacy and Electronic Communications (Amendments etc) (EU Exit) Regulations 2019 (S.I. 2019/419), reg. 1(2), Sch. 1 para. 52(2)(h) (with reg. 5); 2020 c. 1, Sch. 5 para. 1(1)
- F11
Art. 57(1)(sa) inserted (5.2.2026) by Data (Use and Access) Act 2025 (c. 18), s. 142(1), Sch. 9 para. 8(b) (with Sch. 9 Pt. 2); S.I. 2026/82, reg. 2(z11)
- F12
Art. 57(1)(t) omitted (31.12.2020) by virtue of The Data Protection, Privacy and Electronic Communications (Amendments etc) (EU Exit) Regulations 2019 (S.I. 2019/419), reg. 1(2), Sch. 1 para. 52(2)(i) (with reg. 5, Sch. 1 para. 80); 2020 c. 1, Sch. 5 para. 1(1)
- F13
Art. 57(2) omitted (19.6.2026) by virtue of Data (Use and Access) Act 2025 (c. 18), ss. 103(5)(b), 142(1); S.I. 2026/82, reg. 3(a) (with reg. 7)
- F14
Words in Art. 57(3) substituted (31.12.2020) by The Data Protection, Privacy and Electronic Communications (Amendments etc) (EU Exit) Regulations 2019 (S.I. 2019/419), reg. 1(2), Sch. 1 para. 52(4) (with reg. 5); 2020 c. 1, Sch. 5 para. 1(1)
- F15
Word in Art. 57(3) substituted (30.9.2026) by The Data (Use and Access) Act 2025 (Consequential Amendments and Transitional Provision) Regulations 2026 (S.I. 2026/386), reg. 1(2), Sch. 3 para. 41(3)(4)(z1)(i); S.I. 2026/1015, reg. 2(c)
- F16
Art. 57(4) omitted (5.2.2026) by virtue of Data (Use and Access) Act 2025 (c. 18), ss. 94(4), 142(1); S.I. 2026/82, reg. 2(p)
Editorial notes
Notes on the whole EU Regulation
Textual amendments
- F1
Regulation title amended (31.12.2020) by The Data Protection, Privacy and Electronic Communications (Amendments etc) (EU Exit) Regulations 2019 (S.I. 2019/419), reg. 1(2), Sch. 1 para. 2 (with reg. 5); 2020 c. 1, Sch. 5 para. 1(1)
Notes on Chapter VI
Textual amendments
- F1
Ch. 6 heading substituted (31.12.2020) by The Data Protection, Privacy and Electronic Communications (Amendments etc) (EU Exit) Regulations 2019 (S.I. 2019/419), reg. 1(2), Sch. 1 para. 44 (with reg. 5); 2020 c. 1, Sch. 5 para. 1(1)
- F2
Word in Ch. 6 heading substituted (30.9.2026) by The Data (Use and Access) Act 2025 (Consequential Amendments and Transitional Provision) Regulations 2026 (S.I. 2026/386), reg. 1(2), Sch. 3 para. 41(3)(4)(x); S.I. 2026/1015, reg. 2(c)
Notes on Section 2
Textual amendments
- F1
Word in Ch. 6 section 2 heading substituted (31.12.2020) by The Data Protection, Privacy and Electronic Communications (Amendments etc) (EU Exit) Regulations 2019 (S.I. 2019/419), reg. 1(2), Sch. 1 para. 49 (with reg. 5); 2020 c. 1, Sch. 5 para. 1(1)