Skip to content
RGPD

Article 67

Exchange of information

The Commission may adopt implementing acts of general scope in order to specify the arrangements for the exchange of information by electronic means between supervisory authorities, and between supervisory authorities and the Board, in particular the standardised format referred to in Article 64.

Those implementing acts shall be adopted in accordance with the examination procedure referred to in Article 93(2).

Common Questions

Frequently Asked Questions

What does Article 67 of the GDPR regulate?

Article 67 gives the Commission the power to adopt implementing acts of general scope that specify the arrangements for the exchange of information by electronic means between supervisory authorities, and between supervisory authorities and the Board.

It singles out one item in particular: the standardised format referred to in Article 64.

How are the implementing acts under Article 67 adopted?
They are adopted in accordance with the examination procedure referred to in Article 93(2). The wording matters: the Commission may adopt them, so the article grants a power rather than imposing a duty to act.
Does Article 67 create any obligations for companies?

Not directly. The article only concerns the Commission, the supervisory authorities and the Board, and how they exchange information by electronic means among themselves.

Controllers, processors and data subjects are not mentioned: it is a procedural provision about the authorities' own communication.