Texts to 22 Oct 2026

GDPR· Article 57

Analysis in our dossiers
Access, transparency and automated decisions

Text

Article 57 GDPR as printed in the Council text of 22 October 2026

Tasks

Source Council, 22 October 2026. Article 57: ST 14756/26, page 141 · exact text page

Scope This text prints Article 57(1)(k), Article 57(4) only.

Article 57(1)(k)

The Council draft deletes this provision and supplies no replacement wording. Open the official source to read the instruction in context.

The amending passage as printed

paragraph 1, point (k) is deleted;

Article 57(4)

4.

Where requests are manifestly unfounded or excessive, in particular because of their repetitive character or where an abusive intention on the part of the data subject submitting those request can be demonstrated, the supervisory authority may charge a reasonable fee based on administrative costs, or refuse to act on the request. The supervisory authority shall, in the light of all the relevant circumstances of the case, bear the burden of demonstrating the manifestly unfounded or excessive character of the request.

Article 57 in the whole GDPR

How each paragraph has changed

Show the statuses
What each text would do to the law in force
Paragraph Commission19 Nov 2025Council21 May 2026Council10 Jun 2026Council18 Jun 2026Council3 Sep 2026Council2 Oct 2026Council22 Oct 2026 Parliamentamendments
Compared withlaw in forcethe proposal21 May text10 Jun text18 Jun text3 Sep text2 Oct text
1Point (k) Deletes Deleted Deletes Unchanged Deletes Unchanged Deletes Unchanged Deletes Unchanged Deletes Unchanged Deletes Unchanged 6
4Paragraph 4 No change Unchanged Amends , changed since the proposal Changed Amends Unchanged Amends Unchanged Amends Unchanged Amends Unchanged Amends Unchanged 0
Provisions only Parliament would add or change2 units Not in the law in force or this text In neither text Not in the law in force or this text In neither text Not in the law in force or this text In neither text Not in the law in force or this text In neither text Not in the law in force or this text In neither text Not in the law in force or this text In neither text Not in the law in force or this text In neither text 2

Each text against the law in force: ~Amends amends the law in force−Deletes deletes a provision of the law in force=No change leaves the law in force as it is— neither the law in force nor the text has it changed from the text before

Each text against the text before it: ~Changed wording changed−Deleted deletes a provision of the law in force=Unchanged same as the text before— in neither text

What each text does

  1. 19 Nov 2025 Commission proposalCOM(2025) 837 Amends Deletes point (k) of paragraph 1. Article 57 in this text
  2. 21 May 2026 Council textST 9547/26 Changed Changes paragraph 4.ST 9547/26 reproduces only some of the proposal’s changes, so this comparison applies only those it shows or visibly drops. It says nothing about the others. Article 57 in this text
  3. 10 Jun 2026 Council textST 10426/26 Unchanged Same as the text before. Article 57 in this text
  4. 18 Jun 2026 Council textST 10677/26 Unchanged Same as the text before. Article 57 in this text
  5. 16 Jul 2026 IMCO amendments 329–532 to the draft opinionIMCO-AM-791061 1 amendment to this article. Amendments in this document
  6. 27 Jul 2026 ITRE–LIBE amendments 1261–1564 to the draft reportCJ72-AM-791873 7 amendments to this article. Amendments in this document
  7. 3 Sep 2026 Council textST 12535/26 Unchanged Same as the text before. Article 57 in this text
  8. 2 Oct 2026 Council textST 13886/26 Unchanged Same as the text before.Page 126 prints “(9a)” without an instruction or target, so no change can be assigned to that marker. Article 57 in this text
  9. 22 Oct 2026 Council textST 14756/26 Unchanged Same as the text before. Article 57 in this text

Paragraph 1: Point (k)

Deleted by the Commission

Parliament amendments 6

2 would delete the wording, 2 propose alternative wording and 2 would add wording to paragraph 1. Deletion amendments come from ECR and PfE.

By political group; co-sponsored amendments count for each group
TypeEPPECRPfE
− Deletion·12
~ Alternative2··
+ Addition2··

By political group

  • − Deletion ECR 1 PfE 2
  • ~ Alternative EPP 2
  • + Addition EPP 2

Show

  1. 400 Deletion Virginie JoronPfE · IMCO Deletes the Commission’s wording

    11. In Article 57(1) is amended as follows: (a) point (k) is deleted;

    Tabled by
    Virginie Joron
    Group
    PfE
    Targets
    GDPR Article 57(1)(k)
    Document
    IMCO amendments 329–532 to the draft opinion
    Printed header
    Article 3 – paragraph 1 – point 11 / Regulation (EU) 2016/679 / Article 57 – paragraph 1
  2. 1310 Deletion Julie Rechagneux +7ECR, PfE · ITRE–LIBE Deletes the Commission’s wording

    11. In Article 57(1) is amended as follows: (a) point (k) is deleted;

    Tabled by
    Julie Rechagneux, Mélanie Disdier, Aleksandar Nikolic, Pierre-Romain Thionnet, Alexandre Varaut, Fabrice Leggeri, Marion Maréchal, Christophe Bay
    Group
    ECR, PfE
    Targets
    GDPR Article 57(1)(k)
    Document
    ITRE–LIBE amendments 1261–1564 to the draft report
    Printed header
    Article 3 – paragraph 1 – point 11 / Regulation (EU) 2016/679 / Article 57 – paragraph 1 – point k
  3. 1312 Addition Oliver Schenk +13EPP · ITRE–LIBE “handle complaints lodged by a data subject, or by a body, organisation or association in accordance with Article 80 and investigate, in the case of a…”

    (aa) In Article 57, paragraph 1, the following point aa is inserted

    (aa)handle complaints lodged by a data subject, or by a body, organisation or association in accordance with Article 80 and investigate, in the case of a complaint by a data subject at its discretion, to the extent approriate, the subject matter of the complaint and inform the complainant of the progress and the outcome of the investigation within a reasonable period, in particular if further investigation or coordination with another supervisor authority is necessary;'

    Tabled by
    Oliver Schenk, Andrea Wechsler, Angelika Niebler, Monika Hohlmeier, Dimitris Tsiodras, Christian Doleschal, Axel Voss, Ana Miguel Pedro, Marie-Sophie Lanig, Romana Tomc, Marion Walsmann, Lena Düpont, Aura Salla, François-Xavier Bellamy
    Group
    EPP
    Targets
    GDPR Article 57 – paragraph 1 – point aa (new)
    Document
    ITRE–LIBE amendments 1261–1564 to the draft report
    Printed header
    Article 3 – paragraph 1 – point 11 – point a a (new) / Regulation (EU) 2016/679 / Article 57 – paragraph 1 – point aa (new)
  4. 1313 Alternative Axel VossEPP · ITRE–LIBE “and in doing so due regard is given to the principle of proportionality, taking into account the nature, scope, context, risk, and purposes of the…”

    (aa) In Article 57, paragraph 1, point d is amended as follows:

    (d) promote the awareness of controllers and processors of their obligations under this Regulation;, and in doing so due regard is given to the principle of proportionality, taking into account the nature, scope, context, risk, and purposes of the processing, while coordinating, where applicable, with the relevant competent sectoral authorities."

    Justification

    INNOVATION PACKAGE #2: Makes the GDPR’s broad protection more proportionate in practice. It clarifies that principles, guidance, complaints and enforcement must reflect actual risk, legal certainty and the balance required by Recital 4. Supervisory authorities and the EDPB should prioritise serious infringements, coordinate with sectoral regulators, involve stakeholders and avoid guidance that creates new obligations. A Data Protection Data Space improves transparency, evidence-based supervision and consistent application across the Union.

    Tabled by
    Axel Voss
    Group
    EPP
    Targets
    GDPR Article 57 – paragraph 1 – point d
    Document
    ITRE–LIBE amendments 1261–1564 to the draft report
    Printed header
    Article 3 – paragraph 1 – point 11 – point a a (new) / Regulation (EU) 2016/679 / Article 57 – paragraph 1 – point d
  5. 1314 Addition Oliver Schenk +14EPP · ITRE–LIBE “set up regulatory sandboxes to facilitate testing the compliance of specific techniques or technological solutions to be used for the data processing…”

    (ab) In Article 57, paragraph 1, the following point va is added

    (va)set up regulatory sandboxes to facilitate testing the compliance of specific techniques or technological solutions to be used for the data processing activities with the obligations under this Regulation or whether the data processing results in data that would be exempt from this Regulation.'

    Tabled by
    Oliver Schenk, Eva Maydell, Andrea Wechsler, Angelika Niebler, Monika Hohlmeier, Dimitris Tsiodras, Christian Doleschal, Axel Voss, Ana Miguel Pedro, Marion Walsmann, Lena Düpont, Romana Tomc, Marie-Sophie Lanig, Aura Salla, François- Xavier Bellamy
    Group
    EPP
    Targets
    GDPR Article 57 – paragraph 1 – va
    Document
    ITRE–LIBE amendments 1261–1564 to the draft report
    Printed header
    Article 3 – paragraph 1 – point 11 – point a b (new) / Regulation (EU) 2016/679 / Article 57 – paragraph 1 – va
  6. 1315 Alternative Axel VossEPP · ITRE–LIBE “supervisory authority may determine the order of priority according”

    handle complaints lodged by a data subject, or by a body, organisation or association(ab) In Article 57, paragraph 1, point f is amended:

    in accordance with Article 80, and investigate, to the extent appropriate, the subject matter of the complaint and inform the complainant of the progress and the outcome of the investigation within a reasonable period, in particular if further investigation or coordination with another supervisory authority is necessary;(f) in handling complaints, the supervisory authority may determine the order of priority according to the seriousness of the alleged infringement and its impact on the rights of data subjects, and may allocate its investigative resources accordingly, provided that each complaint is handled with due diligence;"

    Justification

    INNOVATION PACKAGE #3: Makes the GDPR’s broad protection more proportionate in practice. It clarifies that principles, guidance, complaints and enforcement must reflect actual risk, legal certainty and the balance required by Recital 4. Supervisory authorities and the EDPB should prioritise serious infringements, coordinate with sectoral regulators, involve stakeholders and avoid guidance that creates new obligations. A Data Protection Data Space improves transparency, evidence-based supervision and consistent application across the Union.

    Tabled by
    Axel Voss
    Group
    EPP
    Targets
    GDPR Article 57 – paragraph 1 – point f
    Document
    ITRE–LIBE amendments 1261–1564 to the draft report
    Printed header
    Article 3 – paragraph 1 – point 11 – point a b (new) / Regulation (EU) 2016/679 / Article 57 – paragraph 1 – point f

Paragraph 4

Changed by the Council on 21 May

Provisions only Parliament amendments would add or change

2 amendments on 2 units the Commission proposal leaves unchanged

Paragraph 2Not amended by the Commission

  1. 1316 Alternative Axel VossEPP · ITRE–LIBE “of electronical forms and set up conditions for”

    11a. In Article 57, paragraph 2 is amended as follows:

    2. Each supervisory authority shall facilitate the submission of complaints referred to in point (f) of paragraph 1 by measures such as a complaint submission form. whichSupervisory canauthority alsomay beestablish completedthe electronically,mandatory withoutuse excludingof electronical forms and set up conditions for other means of communication in exceptional cases."

    Justification

    INNOVATION PACKAGE #4: Makes the GDPR’s broad protection more proportionate in practice. It clarifies that principles, guidance, complaints and enforcement must reflect actual risk, legal certainty and the balance required by Recital 4. Supervisory authorities and the EDPB should prioritise serious infringements, coordinate with sectoral regulators, involve stakeholders and avoid guidance that creates new obligations. A Data Protection Data Space improves transparency, evidence-based supervision and consistent application across the Union.

    Tabled by
    Axel Voss
    Group
    EPP
    Targets
    GDPR Article 57 – paragraph 2
    Document
    ITRE–LIBE amendments 1261–1564 to the draft report
    Printed header
    Article 3 – paragraph 1 – point 11 a (new) / Regulation (EU) 2016/679 / Article 57 – paragraph 2

Paragraph 4a (new)New

  1. 1317 Addition Axel VossEPP · ITRE–LIBE “In fullfilling their tasks supervisory authorities shall take into account that the right to the protection of personal data is not an absolute right…” numbered 4a

    11b.In Article 57, the following paragraphs are added:

    4a.In fullfilling their tasks supervisory authorities shall take into account that the right to the protection of personal data is not an absolute right and must be considered in relation to its function in society and balanced against other fundamental rights, in accordance with the principle of proportionality. They must have inter alia regard of the following as far as relevant in the specific circumstances:

    (a)the desirability of promoting innovation;

    (b)the desirability of promoting competition;

    (c)the importance of the prevention, investigation, detection and prosecution of criminal offences;

    (d)the need to safeguard public security and national security;

    (e)the fact that children merit specific protection with regard to their personal data because they may be less aware of the risks and consequences associated with processing of personal data and of their rights in relation to such processing.

    4b.Supervisory authorities shall, where appropriate, consult and cooperate on national and Union as well as in appropriate cross-border procedures with other regulatory bodies, whose regulatory tasks and powers might are related to the protection of personal data and the free flow of personal data within the Union. When consulting those and cooperating with those other regualtory bodies supervisory authorities praticularly shall take into account the matters according to paragraph 5. The Commission may adopt, by means of an implementing act, procedural rules for the sharing of personal data, business secrets, purpose limititation and other procedural aspects necessary to ensure professional secrecy.

    4c.Supervisory authority shall establish a permanent panel of stakeholder representatives to ensure that they fulfill their tasks, especially regarding the matters described in paragraph 4 duely and monitor relevant developments, insofar as they have an impact on the protection of personal data and the free flow of personal data, in particular the development of information and communication technologies and commercial practices. The Commission may adopt, by means of an implementing act, rules for the appointement and the statue oft he members oft he panel and procedural requirements which ensure professional secrecy and transparency.

    Justification

    INNOVATION PACKAGE #5: Makes the GDPR’s broad protection more proportionate in practice. It clarifies that principles, guidance, complaints and enforcement must reflect actual risk, legal certainty and the balance required by Recital 4. Supervisory authorities and the EDPB should prioritise serious infringements, coordinate with sectoral regulators, involve stakeholders and avoid guidance that creates new obligations. A Data Protection Data Space improves transparency, evidence-based supervision and consistent application across the Union.

    Tabled by
    Axel Voss
    Group
    EPP
    Targets
    GDPR Article 57 – paragraphs 4a, 4b, 4c (new)
    Document
    ITRE–LIBE amendments 1261–1564 to the draft report
    Printed header
    Article 3 – paragraph 1 – point 11 b (new) / Regulation (EU) 2016/679 / Article 57 – paragraphs 4a, 4b, 4c (new)