What should be done by the EU member states and is not a responsibility of the supervisory authorities?
Impose administrative fines to controllers
Make rules for penalizing other GDPR infringements
Order the controller to notify the data subject about a breach
Receive and process data breach notifications from controllers
Submit