Which statement best surveys supervisory authority corrective powers under the GDPR at concept level?
Select an answer to reveal the explanation.
Short Explanation
Regulators aren't limited to a polite nod—they can warn, order fixes, pause or ban processing, and fine. Knowing that toolkit is half of understanding enforcement muscle.
Full Explanation
At concept level, supervisory authority corrective powers include warnings, orders to bring processing into compliance, temporary or definitive bans, and administrative fines, among other measures. That toolkit is how public authorities protect people when processing goes wrong—not merely polite correspondence or reputational notes. Saying supervisory authorities may only send congratulatory letters and may never order changes fails by emptying Article 58 of corrective teeth. Limiting corrective powers to rewriting a company’s commercial invoices fails by inventing an irrelevant commercial-document power unrelated to data-protection remedies. Claiming only the European Parliament may impose operational bans on processing fails: SAs, not Parliament acting as case handler, exercise those operational corrective powers in individual matters. Exam caveat: powers must be used proportionately and with procedural safeguards; the existence of bans and fines does not mean every infringement warrants the maximum measure available. Operational check: map potential SA outcomes when scoping incident risk (orders, bans, fines), prepare remediation plans that anticipate compliance orders, and brief executives that enforcement is not limited to congratulatory letters.