Judgment_paragraph 108 · Data Protection Commissioner v Facebook Ireland Limited and Maximillian Schrems (C-311/18)

108It follows from those provisions that the supervisory authorities’ primary responsibility is to monitor the application of the GDPR and to ensure its enforcement. The exercise of that responsibility is of particular importance where personal data is transferred to a third country since, as is clear from recital 116 of that regulation, ‘when personal data moves across borders outside the Union it may put at increased risk the ability of natural persons to exercise data protection rights in particular to protect themselves from the unlawful use or disclosure of that information’. In such cases, as is stated in that recital, ‘supervisory authorities may find that they are unable to pursue complaints or conduct investigations relating to the activities outside their borders’.

Data Protection Commissioner v Facebook Ireland Limited and Maximillian Schrems (C-311/18)

Key facts

History · 1 version

Connections