EU Member States notifications to the European Commission under the GDPR

Under the General Data Protection Regulation (GDPR), all EU Member States must notify to the Commission the provisions:

• on data protection authorities (Article 51(4)),
• on penalties (Article 84(2)),
• on reconciling the right to data protection with the right to freedom of expression and information (Article 85(3)).

In case an EU Member State regulated data protection at national level, the following provisions should also be notified to the Commission:

• the processing of personal data in the employment context (Article 88(3)),
• obligations of secrecy (Article 90(2)),
• limitations to the transfer of specific categories of data for important reasons of public interests (Article 49(5)),
• other legal remedies instead of administrative fines (Article 83(9)).

Some of the personal data contained in the documents (name and contact details of officials in charge, signatures) have been redacted, in line with Regulation 1049/2001 and Article 8(b) of Regulation 45/2001.