<!-- headlesslaw {"release":{"id":"c89ff15ec1240a456b40735def079beeda55a0c372be7f3da154287997367ecf","published":"2026-11-02T04:02:35Z","pinned":false},"limits":{"coverage":{"history":"full","held_since":"2016-05-04","gaps":[],"covered":["GDPR L1"],"not_covered":["national guidance","court decisions"]},"freshness":{"release_id":"c89ff15ec1240a456b40735def079beeda55a0c372be7f3da154287997367ecf","release_published":"2026-11-02T04:02:35Z","checked_at":"2026-10-26","checked_against":"EUR-Lex"},"truncation":null,"failures":[],"incomplete":[]},"page":{"path":"/gdpr/articles/54","url":"https://www.headlesslaw.com/gdpr/articles/54","title":"Article 54 — Rules on the establishment of the supervisory authority","family":"l1_generated","work_id":"gdpr","status":"in_force","force_status":"in_force","date_state":"current","requested_date":null,"as_of":"2026-11-02","applies_from":"2018-05-25","application":{"state":"applicable","next":null,"dates":[{"at":"2018-05-25","note":"Article 99(2)"}]},"version_label":"Consolidated version of 4 May 2016","check":{"against":"EUR-Lex","on":"2026-10-26"},"check_result":"matched","official_url":"https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:02016R0679-20160504","valid_from":"2016-05-04","valid_until":"2018-05-25","revision":1,"content_id":"3878baba31269ad9","change_date":null,"nearest_versions":["2016-05-04"],"first_text_date":"2016-04-27","correction_applies":false,"versions":["2016-05-04"],"version_url":"https://www.headlesslaw.com/gdpr/articles/54/versions/2016-05-04","revision_url":"https://www.headlesslaw.com/gdpr/articles/54/versions/2016-05-04/rev/3878baba31269ad9","versions_url":"https://www.headlesslaw.com/gdpr/articles/54/versions","relations_url":"https://www.headlesslaw.com/gdpr/articles/54/relations","source_line":null,"attribution":null}} -->
---
title: "Article 54 — Rules on the establishment of the supervisory authority"
type: regulation
legal_status: in_force
source: "https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:02016R0679-20160504"
source_retrieved: 2026-09-28
shortTitle: "Article 54 — Rules on the establishment of the supervisory authority"
instrument_type: level1_regulation
authority: Commission
binding: true
binding_character: binding
mica_level2: false
legal_basis: "Regulation (EU) 2016/679"
instrument: gdpr
celex: "32016R0679"
regulation: GDPR
regulation-full: "Regulation (EU) 2016/679"
article: 54
status: in_force
object_id: eu.gdpr.legal_text.article.54
text_version: "Consolidated version of 4 May 2016"
source_url: "https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:02016R0679-20160504"
check_status: matched
verified: true
last_checked: 2026-10-26
---

*In force · Consolidated version of 4 May 2016 · Checked against EUR-Lex on 26 Oct 2026 · [Official source](https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:02016R0679-20160504)*

1. <a id="p-1"></a>Each Member State shall provide by law for all of the following:

    <a id="p-1-a"></a>**(a)** the establishment of each [supervisory authority](https://www.headlesslaw.com/definitions/gdpr/supervisory-authority);

    <a id="p-1-b"></a>**(b)** the qualifications and eligibility conditions required to be appointed as member of each supervisory authority;

    <a id="p-1-c"></a>**(c)** the rules and procedures for the appointment of the member or members of each supervisory authority;

    <a id="p-1-d"></a>**(d)** the duration of the term of the member or members of each supervisory authority of no less than four years, except for the first appointment after 24 May 2016, part of which may take place for a shorter period where that is necessary to protect the independence of the supervisory authority by means of a staggered appointment procedure;

    <a id="p-1-e"></a>**(e)** whether and, if so, for how many terms the member or members of each supervisory authority is eligible for reappointment;

    <a id="p-1-f"></a>**(f)** the conditions governing the obligations of the member or members and staff of each supervisory authority, prohibitions on actions, occupations and benefits incompatible therewith during and after the term of office and rules governing the cessation of employment.
2. <a id="p-2"></a>The member or members and the staff of each supervisory authority shall, in accordance with Union or Member State law, be subject to a duty of professional secrecy both during and after their term of office, with regard to any confidential information which has come to their knowledge in the course of the performance of their tasks or exercise of their powers. During their term of office, that duty of professional secrecy shall in particular apply to reporting by natural persons of infringements of this Regulation.

***

[Chapter VI — Independent supervisory authorities](../chapters/vi.md) · [← Article 53](53.md) · [Article 55 →](55.md)
