Data Protection Authority Announces Unprovoced Controls

Among other things, the General Data Protection Regulation (GDPR) gives the supervisory authorities the task of monitoring and enforcing the application of the Regulation. For this purpose, the supervisory authority can rely on the submissions and complaints of those affected. However, it also has the possibility to take action of its own accord and to carry out so-called "on-the-spot checks" or unprovoked controls on those responsible for data processing. Such controls are particularly feared by companies, as they force companies to prepare and verify a large amount of information within a short period of time specified by the authority, without being prepared for this request at that moment.