What is a “Supervisory Authority” (SA) under EU Data Protection Law?

A Supervisory Authority (SA) (a.k.a. Data Protection Authority (DPA)) is an independent public authority that supervises, through investigative and corrective powers, the application of European data protection law.

SAs provide expert advice on data protection issues and handle complaints lodged against violations of European Data Protection Law (including the General Data Protection Regulation (GDPR) and the relevant national laws). There is one SA in each EU Member State. Under EU law, all EU citizens have a constitutional right to file a complain regarding their right to data protection under Article 8.3 of the EU Charter.

Article 8 of the Charter of Fundamental Rights of the EU

(1) Everyone has the right to protection of personal data concerning him or her.

(2) Such data must be processed fairly for specified purposes and on the basis of the consent of the person concerned or some other legitimate basis laid down by law. Everyone has the right of access to data which has been collected concerning him or…