Chapter VI - Independent Supervisory Authorities

Section 2 - Competence, Tasks and Powers

Article 58 - Powers

1. Each supervisory authority shall have all of the following investigative powers:
   1. to order the controller and the processor, and, where applicable, the controller's or the processor's representative to provide any information it requires for the performance of its tasks;
   2. to carry out investigations in the form of data protection audits;
   3. to carry out a review on certifications issued pursuant to Article 42(7);
   4. to notify the controller or the processor of an alleged infringement of this Regulation;
   5. to obtain, from the controller and the processor, access to all personal data and to all information necessary for the performance of its tasks;
   6. to obtain access to any premises of the controller and the processor, including to any data processing equipment and means, in accordance with Union or Member State procedural law.

Article 59 - Activity Reports

Each supervisory authority shall draw up an annual report on its activities, which may include a list of types of infringement notified and types of measures taken in accordance with Article 58(2). Those reports shall be transmitted to the national parliament, the government and other authorities as designated by Member State law. They shall be made available to the public, to the Commission and to the Board.