Abstract
Regulation (EU) 2016/679 of the European Parliament and of the Council (GDPR) establishes the obligation for states to designate a supervisory authority to oversee compliance with the rules set out therein. The obligation to designate a supervisory authority is also enshrined in other legislation at the international level and at the constitutional level. The article focuses on the aspect of embedding it in legislation and its status as an independent administrative authority.