Each member state "shall provide one or more independent public authorities to be responsible for monitoring the application of the GDPR regulation," as stated in Article 51.

DPAs are independent public agencies that monitor the enforcement of the data protection law via the use of their investigation and remedial powers. They address complaints about violations of the General Data Protection Regulation and the pertinent national laws and offer knowledgeable guidance on data protection concerns.