lexiara

1.

GDPR

Each supervisory authority shall have all of the following investigative powers: to order the controller and the processor, and, where applicable, the controller's or the processor's representative to provide any information it requires for the performance of its tasks; to carry out investigations in the form of data protection audits; to carry out a review on certifications issued pursuant to Article 42(7); to notify the controller or the processor of an alleged infringement of this Regulation; to obtain, from the controller and the processor, access to all personal data and to all information necessary for the performance of its tasks; to obtain access to any premises of the controller and the processor, including to any data processing equipment and means, in accordance with Union or Member State procedural law.

· All articles ·

Source: EUR-Lex (Cellar) · retrieved 2026-09-25 · Text as adopted (Official Journal); later amendments are not incorporated in this text.