What should be done by the EU member states and is not a responsibility of the supervisory authorities?

What should be done by the EU member states and is not a responsibility of the supervisory authorities?
A . Impose administrative fines to controllers
B . Make rules for penalizing other GDPR infringements
C . Order the controller to notify the data subject about a breach
D . Receive and process data breach notifications from controllers

View Answer

Answer: B