Article 57 of GDPR defines primary tasks entrusted to the supervisory authorities. They could be divided into six main groups.
Informative and advisory tasks. The supervisory authorities may contribute to the creation of legal provisions in line with the data protection standards established by GDPR in order to ensure effective performance of right and obligations arising therefrom.
Advisory and information tasks include an obligation to promote both public awareness and understanding of the risks, rules, safeguards and rights in relation to processing, and the awareness of controllers and processors of their obligations under GDPR. Special attention has been paid to the promotion of awareness and understanding among children since a growing number of information society services are addressed directly to children and youth or heavily utilised by youngsters (even if their terms and conditions pretend not to be so), so it is essential to safeguard their rights and interests. It means also that supervisory authority activities should be understandable for children both on the level of content and form of a message. Supervisory authorities are required to advise public institutions and bodies on legislative and administrative measures relating to the protection of natural person rights and freedoms with regard to processing. They must provide, upon request, information to any data subject concerning the exercise of their rights under GDPR and, if appropriate, cooperate with the supervisory authorities in other Member States in this scope.
According to Article 57(1f) of GDPR, the authority investigates the subject matter of the complaint of a data subject and informs the data subject of the progress and the outcome of the investigation within a reasonable period. It shall also facilitate the submission of such complaints, for e.g., by issuing a complaint submission form, including the possibility of electronic submission.
Obligations stipulated in Article 57(1g)(1h) of GDPR intend to ensure consistent enforcement of the provisions of the GDPR with regard to the application of cooperation mechanisms. These obligations particularly concern the exchange of information, mutual assistance and cooperation with other authorities within the scope of proceedings.
Article 57(3) of GDPR indicates that the performance of the tasks of supervisory authorities shall be free of charge for data subjects and DPOs as a rule. This could be nonetheless limited where requests are manifestly unfounded, excessive or have repetitive character.