Article 31 of the GDPR: Cooperation with the Supervisory Authority

· By Bertrand BucelleBertrand Bucelle · 2 min read

Article 31 of the GDPR: Cooperation with the Supervisory Authority

Article 31 of the GDPR Explained

The controller and the processor must cooperate with the competent supervisory authority, upon its request, in the performance of its tasks.

This includes:

  • Requests for information (e.g., records, documentation, proof of compliance);
  • On-site inspections or controls;
  • The implementation of recommendations or corrective measures.

This obligation applies to all organisations, whether public or private.

Why Is This Article Important for Your GDPR Compliance?

The transparency and cooperation with the supervisory authority are essential to demonstrate your commitment to compliance. A lack of collaboration can exacerbate sanctions in the event of an audit. This is a pillar of the accountability of data controllers and processors.

How to comply with Article 31 of the GDPR?

  • Be prepared to respond promptly to any request from the French supervisory authority (designation of a point of contact, documentary monitoring);
  • Keep your registers, policies and proof of compliance up to date;
  • Be able to explain your processing operations, security measures and processes;
  • Implement the authority's recommendations in the event of an alert or inspection.

Application Examples of Article 31 of the GDPR

  • A company receives a request for information from the French supervisory authority: it transmits its register and internal policies;
  • A public body is subject to an inspection: it cooperates actively by facilitating access to its premises and data;
  • A data processor responds to a request for explanation regarding a specific processing operation implemented on behalf of a client.

Related Resources

Accelerate Your Compliance in a Few Clicks

Thanks to our all-in-one solution, you can easily accelerate and ensure your compliance:

  • Automate your compliance with our GDPR software
  • Supported or outsourced by our DPO experts
  • Raise awareness among your teams with our GDPR training e-learning

Request a demo with an expert

Assess your situation in 15 minutes with our free, no-obligation GDPR self-assessment.

GDPR: Self-assess now