Skip to main content
European Commission logo
European Commission

EU Member States notifications to the European Commission under the GDPR

Under the General Data Protection Regulation (GDPR), all EU Member States must notify to the Commission the provisions:

  • on data protection authorities (Article 51(4)),
  • on penalties (Article 84(2)),
  • on reconciling the right to data protection with the right to freedom of expression and information (Article 85(3)).

In case an EU Member State regulated data protection at national level, the following provisions should also be notified to the Commission:

  • the processing of personal data in the employment context (Article 88(3)),
  • obligations of secrecy (Article 90(2)),
  • limitations to the transfer of specific categories of data for important reasons of public interests (Article 49(5)),
  • other legal remedies instead of administrative fines (Article 83(9)).

Some of the personal data contained in the documents (name and contact details of officials in charge, signatures) have been redacted, in line with Regulation 1049/2001 and Article 8(b) of Regulation 45/2001.

Documents

 

Bulgaria notification GDPR articles 51(4), 84(2), 85(3), 88(3), 90(2)
28 June 2019
Denmark notification GDPR articles 49(5), 51(4), 83(9), 84(2), 85(3), 88(3), 90(2)
23 October 2018
Finland - Åland province notification GDPR articles 51(4), 83(7), 84(2), 85(3), 88(3), 90(2)
26 May 2020
Germany notification GDPR articles 49(5), 51(4), 83(9), 84(2), 85(3), 88(3), 90(2) addendum
28 July 2021
Germany notification GDPR articles 49(5), 51(4), 83(9), 84(2), 85(3), 88(3), 90(2)
15 November 2018
Italy notification GDPR articles 49(5), 51(4), 83(9), 84(2), 85(3), 88(3), 90(2)
10 September 2019