第 58 條 GDPR. 權力
Article 58 GDPR. Powers
2. 各監管機關應有下列全部之糾正權力:
2. Each supervisory authority shall have all of the following corrective powers:
(a) 當欲進行之資料處理可能會違反本規則之規定時,向控管者或處 理者發布警告;
(a) to issue warnings to a controller or processor that intended processing operations are likely to infringe provisions of this Regulation;
(b) 當資料處理已違反本規則之規定時,對控管者或處理者發布告 誡;
(b) to issue reprimands to a controller or a processor where processing operations have infringed provisions of this Regulation;
(c) 命令控管者或處理者遵循資料主體行使其依本規則之權利的要 求;
(c) to order the controller or the processor to comply with the data subject’s requests to exercise his or her rights pursuant to this Regulation;
(d) 命令控管者或處理者以適當之特定方法及於特定期間內使資料 處理符合本規則之規定;
(d) to order the controller or processor to bring processing operations into compliance with the provisions of this Regulation, where appropriate, in a specified manner and within a specified period;
(e) 命令控管者向資料主體通知個人資料之侵害;
(e) to order the controller to communicate a personal data breach to the data subject;
(f) 課予暫時或終局之限制,包括對資料處理之禁令;
(f) to impose a temporary or definitive limitation including a ban on processing;
(g) 命令依第 16 條、第 17 條及第 18 條對個人資料之更正或刪除, 或對資料處理之限制,以及對個人資料依照第 17 條第 2 項及第 19 條 被揭露之接收者就該等行動之通知;
(g) to order the rectification or erasure of personal data or restriction of processing pursuant to Articles 16, 17 and 18 and the notification of such actions to recipients to whom the personal data have been disclosed pursuant to Article 17(2) and Article 19;
(h) 撤銷或命令認證機構撤銷依第 42 條及第 43 條所為之認證,或若 認證之要件不具備或不再具備時,命令認證機構不得核發認證;
(h) to withdraw a certification or to order the certification body to withdraw a certification issued pursuant to Articles 42 and 43, or to order the certification body not to issue certification if the requirements for the certification are not or are no longer met;
(i) 依個案情形,額外或不以本項所提及之其他方式而依第 83 條處以 行政罰鍰;
(i) to impose an administrative fine pursuant to Article 83, in addition to, or instead of measures referred to in this paragraph, depending on the circumstances of each individual case;
(j) 命令對位於第三國之接收者或國際組織停止資料流通。
(j) to order the suspension of data flows to a recipient in a third country or to an international organisation.