44
15039/15
VH/np
62
ANNEX
DGD 2C
LIMITE
EN
(113)Any natural or legal person has the right to bring an action for annulment of decisions of the
European Data Protection Board before the Court of Justice of the European Union (the
“Court of Justice”) under the conditions provided for in Article 263 TFEU. As addressees of
such decisions, the concernedsupervisory authorities who wish to challenge them, have to
bring action within two months of their notification to them, in accordance with Article 263
TFEU. Where decisions of the European Data Protection Board are of direct and individual
concern to a controller, processor or the complainant, the latter may bring an action for
annulment against those decisions and they should do so within two months of their
publication on the website of the European Data Protection Board, in accordance with Article
263TFEU. Without prejudice to this right under Article 263 TFEU, each natural or legal
person should have an effective judicial remedy before the competent national court against a
decision of a supervisoryauthority which produces legal effects concerning this person. Such
a decision concerns in particular the exercise of investigative, corrective and authorisation
powers by the supervisory authority or the dismissal or rejection of complaints. However, this
right does not encompass other measures of supervisory authorities which are not legally
binding, such as opinions issued by or advice provided by the supervisory authority.
Proceedings against a supervisory authority should be brought before the courts of the
Member State, where the supervisory authorityis established and should be conducted in
accordance with the national procedural law of that Member State. Those courts should
exercise full jurisdiction which should include jurisdiction to examine all questions of fact and
law relevant to the dispute before it. Where a complaint has been rejected or dismissed by a
supervisory authority, the complainant may bring proceedings to the courts in the same
Member State. In thecontext of judicial remedies relating to the application of this
Regulation, national courts which consider a decision on the question necessary to enable
them to give judgment, may, or in the case provided for in Article 267 TFEU, must, request
the Court of Justice to give a preliminary ruling on the interpretation of Union law including
this Regulation. Furthermore, where a decision of a supervisory authority implementing a
decision of the European Data Protection Board is challenged before a national court and the
validity of the decision of the European Data Protection Board is at issue, that national court
does not have the power to declare the European Data Protection Board's decision invalid but
must refer the question of validity to the Court of Justice in accordance with Article 267
TFEU as interpreted by the Court of Justice, whenever it considers the decision invalid.
However, a national court may not refer a question on the validity of thedecision of the
European Data Protection Board at the request of a natural or legal person which had the
opportunity to bring an action for annulment of that decision, in particular if it was directly
and individually concerned by that decision, but had not done so within the period laid down
by Article 263 TFEU.