2.

The European Data Protection Supervisor shall have the following corrective powers: to issue warnings to a controller or processor that intended processing operations are likely to infringe provisions of this Regulation; to issue reprimands to a controller or a processor where processing operations have infringed provisions of this Regulation; to refer matters to the controller or processor concerned and, if necessary, to the European Parliament, the Council and the Commission; to order the controller or the processor to comply with the data subject’s requests to exercise his or her rights pursuant to this Regulation; to order the controller or processor to bring processing operations into compliance with the provisions of this Regulation, where appropriate, in a specified manner and within a specified period; to order the controller to communicate a personal data breach to the data subject; to impose a temporary or definitive limitation including a ban on processing; to order the rectification or erasure of personal data or restriction of processing pursuant to Articles 18, 19 and 20 and the notification of such actions to recipients to whom the personal data have been disclosed pursuant to Article 19(2) and Article 21; to impose an administrative fine pursuant to Article 66 in the case of non-compliance by a Union institution or body with one of the measures referred to in points (d) to (h) and (j) of this paragraph, depending on the circumstances of each individual case; to order the suspension of data flows to a recipient in a Member State, a third country or to an international organisation.

← art_58__para_1__point_e__text_1 · All articles · art_58__para_2__text_1 →

Source: EUR-Lex (Cellar) · retrieved 2026-10-27 · Text as adopted (Official Journal); later amendments are not incorporated in this text.