A briefing deck labels the European Council as the day-to-day GDPR supervisor that investigates controllers. What correction is needed?
Select an answer to reveal the explanation.
Short Explanation
The European Council is the big-picture political summit table, not the privacy inspector knocking on a controller’s door. Day-to-day GDPR supervision lives with national supervisory authorities and EU cooperation bodies like the EDPB. Wrong layer, wrong job title.
Full Explanation
The European Council comprises heads of state or government and defines the EU’s overall political directions and priorities. It is not the operational supervisor of controllers under the GDPR. Supervision and enforcement primarily involve independent national supervisory authorities, with consistency and cooperation mechanisms involving the European Data Protection Board (and the EDPS for EU institutions).