The Agency shall decide on the violation of rights guaranteed by the General Data Protection Regulation and the Act on Implementation of General Data Protection Regulation by a ruling.

The Agency has the power to impose administrative fines. Administrative fines shall, depending on the circumstances of each individual case, be imposed in addition to, or instead of, measures referred to in points (a) to (h) and (j) of Article 58(2) of the General Data Protection Regulation.

According to the Act on the protection of natural persons relating to processing and exchange of personal data in order to prevent, research, discrimination, or persecution of criminal offenses or execution of criminal sanctions (transposing Directive 2016/681/EU), the Agency has the power to initiate misdemeanor procedure in front of Misdemeanour Court.