Article 58 — Powers
Regulation (EU) 2018/1725, data protection for EU institutions
What does EUDPR Article 58 say?
Short answer, straight from the official text
1. The European Data Protection Supervisor shall have the following investigative powers: (a) to order the controller and the processor to provide any information it requires for the performance of his or her tasks; (b) to carry out investigations in the form of data protection audits;
Source: Regulation (EU) 2018/1725, data protection for EU institutions, read 2026-08-14.
| In the act | EU 2018/1725 |
| CELEX | 32018R1725 |
| Read on | 2026-08-14 |
Official text
Read from the EU Publications Office for this CELEX number. The wording stands as published; nothing here is rewritten or summarised.
Jump to a point: Point 1 · Point 2 · Point 3 · Point 4 · Point 5 · Point 6 · Point 7 · Point 8 · Point 9 · Point 10 · Point 11 · Point 12
1. The European Data Protection Supervisor shall have the following investigative powers:
(a) to order the controller and the processor to provide any information it requires for the performance of his or her tasks;
(b) to carry out investigations in the form of data protection audits;
(c) to notify the controller or the processor of an alleged infringement of this Regulation;
(d) to obtain, from the controller and the processor, access to all personal data and to all information necessary for the performance of his or her tasks;
(e) to obtain access to any premises of the controller and the processor, including to any data processing equipment and means, in accordance with Union law.
2. The European Data Protection Supervisor shall have the following corrective powers:
(a) to issue warnings to a controller or processor that intended processing operations are likely to infringe provisions of this Regulation;
(b) to issue reprimands to a controller or a processor where processing operations have infringed provisions of this Regulation;
(c) to refer matters to the controller or processor concerned and, if necessary, to the European Parliament, the Council and the Commission;
(d) to order the controller or the processor to comply with the data subject’s requests to exercise his or her rights pursuant to this Regulation;
(e) to order the controller or processor to bring processing operations into compliance with the provisions of this Regulation, where appropriate, in a specified manner and within a specified period;
The article continues in the official text.
The same rule in other acts
These articles carry the same official heading. The wording is not identical; read each text at its own source.
- GDPR Article 58 — Powers
The text is quoted from the official source and is not legal advice. A national court reads the language version that binds in its jurisdiction.
Back to the act · EU acts, read down to the national law
ExploreWorldAI is operated by Valkiv Ventures AB (Reg. no. 556995-1311), Kungsgatan 8, 111 43 Stockholm, Sweden. EU-hosted, with data processing assessed against the GDPR. Contact: hello@exploreworldai.com.
Machine-readable summaries for AI agents: /llms.txt and /llms-full.txt.
