The controller and the processor and, where applicable, their representatives, shall cooperate, on request, with the supervisory authority in the performance of its tasks.
Article 31
Cooperation with the supervisory authority
Common Questions
Frequently Asked Questions
Who has to cooperate with the supervisory authority under Article 31?
The obligation applies to both the controller and the processor. Where applicable, it also covers their representatives. So a processor cannot leave cooperation to the controller alone: each of them is directly bound by this duty.
Does Article 31 require us to cooperate proactively, or only when asked?
The article ties the duty to a request: the controller and the processor shall cooperate with the supervisory authority on request. The obligation under this article is therefore triggered when the authority approaches you in the performance of its tasks. Article 31 itself only covers cooperation on request.
What kind of cooperation does Article 31 cover?
The text is broad: cooperation with the supervisory authority in the performance of its tasks. The article is a single sentence and does not list specific forms of cooperation, deadlines or procedures. In practice, the duty follows whatever task the authority is carrying out when it makes its request.