Dealing with the supervisory authority: what a business must know
Engagement with the data protection supervisory authority often begins unexpectedly — with a subject's complaint or on the authority's own initiative. On this page we explain how the process runs and which deadlines are decisive. One important circumstance first: under the current redaction of the Law on Personal Data Protection, as amended by the law of 17 December 2025, data protection supervision is exercised by the State Audit Service — complaints, inspections and measures therefore occur in the name of that authority.