Regulation (EU) No 1024/2012 of the European Parliament and of the CouncilShow full title

Article 21 Supervision

1. The national supervisory authority or authorities designated in each Member State and endowed with the powers referred to in Article 28 of Directive 95/46/EC (the ‘National Supervisory Authority’) shall independently monitor the lawfulness of the processing of personal data by the IMI actors of their Member State and, in particular, shall ensure that the rights of data subjects set out in this Chapter are protected in accordance with this Regulation.

2. The European Data Protection Supervisor shall monitor and seek to ensure that the personal data processing activities of the Commission, in its role as an IMI actor, are carried out in accordance with this Regulation. The duties and powers referred to in Articles 46 and 47 of Regulation (EC) No 45/2001 shall apply accordingly.

3. The National Supervisory Authorities and the European Data Protection Supervisor, each acting within the scope of their respective competencies, shall ensure coordinated supervision of IMI and its use by IMI actors.

4. The European Data Protection Supervisor may invite the National Supervisory Authorities to meet, where necessary, for the purposes of ensuring coordinated supervision of IMI and its use by IMI actors, as referred to in paragraph 3. The cost of such meetings shall be borne by the European Data Protection Supervisor. Further working methods for this purpose, including rules of procedure, may be developed jointly as necessary. A joint report of activities shall be sent to the European Parliament, the Council and the Commission at least every three years.