Skip to main content
Praxikon

Article 80: Representation of data subjects

Praxikon tracks Article 80 (Representation of data subjects) under the GDPR, alongside the EU AI Act, citing the source for every statement.

Chapter VIIIIn force since 25-05-2018

Official text

/
The data subject shall have the right to mandate a not-for-profit body, organisation or association which has been properly constituted in accordance with the law of a Member State, has statutory objectives which are in the public interest, and is active in the field of the protection of data subjects' rights and freedoms with regard to the protection of their personal data to lodge the complaint on his or her behalf, to exercise the rights referred to in Articles 77, 78 and 79 on his or her behalf, and to exercise the right to receive compensation referred to in Article 82 on his or her behalf where provided for by Member State law.
Member States may provide that any body, organisation or association referred to in paragraph 1 of this Article, independently of a data subject's mandate, has the right to lodge, in that Member State, a complaint with the supervisory authority which is competent pursuant to Article 77 and to exercise the rights referred to in Articles 78 and 79 if it considers that the rights of a data subject under this Regulation have been infringed as a result of the processing.

Source: EUR-Lex, Regulation (EU) 2016/679. Official text, reproduced without modification.

Cross-references

More case law, guidelines and fines

In addition to the overview at the bottom of this page: rulings, guidelines and fines that interpret or apply this article, newest first. Each item was checked against the official source.

Case law (3)

  • 11 July 2024 · C-757/22 · CJEU
    Meta Platforms Ireland (duty to inform)

    A consumer association can bring a representative action for breach of the duty to inform about the purposes and recipients of processing.

  • 28 April 2022 · C-319/20 · CJEU
    Meta Platforms v Bundesverband

    A consumer association may, under national law, bring proceedings against GDPR infringements without a mandate, including through rules on unfair commercial practices.

  • 29 July 2019 · C-40/17 · CJEUDirective 95/46
    Fashion ID

    A website embedding a Facebook button is a joint controller, but only for collecting and transmitting visitor data. Consumer associations may bring proceedings on behalf of data subjects.

Checked on 5 November 2026

Connections

What connects to Article 80 GDPR

Case law