Article 52 — Independence

Article 52 converts the idea of regulatory independence into concrete legal safeguards. It does not merely say that a supervisory authority should be independent “in spirit.” It requires independence in decision-making, personnel, staffing, resources, infrastructure and budgeting, while still allowing lawful financial scrutiny and judicial review.

The central idea is simple:

A data protection authority must be able to investigate any organisation, including the government itself, without fear, favour, pressure, instructions or financial retaliation.

The official text of Article 52 establishes six connected guarantees: complete institutional independence, freedom from influence and instructions, avoidance of incompatible activities, adequate resources, control over staff and protected financial arrangements.

1. Why supervisory-authority independence matters

The GDPR applies not only to private companies but also to ministries, municipalities, police bodies, tax departments, public hospitals and other state institutions. A supervisory authority may therefore have to investigate the same government that appoints its members and provides its budget.

That creates an obvious risk.

Illustration

Suppose a national interior ministry operates a facial-recognition database unlawfully. A complaint is made to the national data protection authority. If the minister can:

• tell the authority not to investigate;
• remove its chairperson;
• transfer its investigators;
• cut its budget;
• demand confidential information about the investigation; or
• overturn its decision. the authority cannot realistically regulate the ministry. Article 52 seeks to prevent both obvious interference and more subtle pressure. Independence is consequently not a personal privilege given to regulators. It exists to make data protection supervision effective, impartial and trustworthy. The CJEU has treated the guarantee as protecting the persons and organisations affected by supervisory decisions, rather than conferring a special status on officials.

2. The constitutional basis of independence

Article 52 is supported by primary EU law.

Article 8(3) of the Charter of Fundamental Rights provides that compliance with data protection rules must be subject to control by an independent authority. Article 16(2) TFEU similarly requires independent-authority control of rules adopted under that provision.

Article 39 TEU also refers to independent supervision, but in the more particular context of personal-data processing by Member States when carrying out activities falling within the Common Foreign and Security Policy. It should therefore not be presented as the general legal foundation for all GDPR supervisory authorities.

Recital 117 describes complete independence as an essential component of personal-data protection. Recitals 118, 120 and 121 then explain that independence requires resources, organisational safeguards, integrity and freedom from incompatible activities, but does not exclude financial monitoring or judicial review.

Technical correction concerning the supplied commentary

The supplied text refers to Article 4(12) GDPR as defining a supervisory authority. That is incorrect:

• Article 4(12) defines a personal data breach.
• Article 4(21) defines a supervisory authority.

This distinction is important because Article 52 applies to the public authorities established under Article 51 and defined in Article 4(21).

3. The structure of Article 52

Article 52 can be understood as containing six layers of protection:

1. Institutional independence: the authority as a body must act independently.
2. Personal independence: its members must be free from influence and instructions.
3. Integrity and incompatibility rules: members must avoid conflicting activities.
4. Material independence: the authority must have adequate resources and infrastructure.
5. Staffing independence: it must choose and direct its own staff.
6. Budgetary independence: financial control must not be used to influence its work.

These safeguards overlap. A statute stating that an authority is independent will not be sufficient if, in reality, the government selects its investigators, controls its office, monitors its cases and can cut its funds whenever it dislikes a decision.

4. Article 52(1): “Complete independence”

Article 52(1) states that each supervisory authority shall act with complete independence when performing its tasks and exercising its powers.

This is the general or catch-all rule. Paragraphs 2 to 6 provide particular safeguards, but they do not exhaust the meaning of independence. A national arrangement may violate paragraph 1 even if it does not fall neatly within one of the more specific paragraphs.

4.1 “Each” supervisory authority

Where a country creates several authorities, every one of them must be independent.

A Member State cannot argue that its national authority is independent while its regional authorities remain under ministerial control. Nor can one independent authority compensate for another authority’s lack of independence.

Illustration

A federal country has:

• one federal data protection authority;
• twelve regional authorities;
• one specialist authority for a constitutionally protected sector. Article 52 applies separately to all fourteen authorities.

4.2 “Shall act”

“Shall” indicates a binding obligation, not a recommendation.

The obligation operates at several levels:

• the Member State must create a legally independent structure;
• the authority must exercise its statutory autonomy;
• the members must avoid seeking or accepting instructions;
• staff must act under the authority’s exclusive direction;
• other state bodies must refrain from interference.

A government cannot satisfy Article 52 simply by placing the word “independent” in national legislation. The practical operation of the authority matters.

4.3 Why “complete” independence is broader than functional autonomy

A narrow model of independence might mean only that no controller or processor under investigation can give instructions to the authority.

Article 52 goes much further. The authority must also be independent from:

• national and regional governments;
• ministries;
• legislatures when attempting to influence a particular case;
• political parties;
• public bodies under investigation;
• influential businesses;
• industry associations;
• trade unions;
• complainants;
• advocacy groups;
• other regulators;
• the European Commission, in relation to impermissible instructions;
• personal or professional interests of its own members.

In Commission v Germany, the CJEU rejected arrangements allowing governmental supervision of data protection authorities and interpreted complete independence broadly. The Court considered that even the risk of political influence could produce “prior compliance,” meaning that the authority might alter its conduct in anticipation of how government officials would react.

5. What independence does and does not mean

5.1 Independence means freedom of regulatory judgment

The authority must independently decide matters such as:

• whether to open an investigation;
• what evidence to request;
• whether an infringement occurred;
• which corrective power to use;
• whether a fine is appropriate;
• what guidance to issue;
• what position to take in European cooperation proceedings.

Example

of prohibited control

A minister tells the authority:

“Do not fine the national airline because it is economically important.”

That is direct interference.

Example

of subtler interference The minister does not issue an express instruction but reminds the authority’s chairperson that:

• the chairperson wants reappointment;
• next year’s budget is under review;
• an investigation could harm investment;
• the government expects “pragmatic” enforcement. This may amount to indirect influence even though no formal order was issued.

5.2 Independence does not mean freedom from law

A supervisory authority remains bound by:

• the GDPR;
• the EU Charter;
• other applicable EU law;
• lawful national procedural rules;
• proportionality;
• equality and non-discrimination;
• rights of defence;
• duties to give reasons;
• EDPB dispute-resolution decisions where legally binding;
• judgments of competent courts.

The authority cannot say:

“We are independent, so courts, legislation and procedural fairness do not apply to us.”

Independence protects regulatory judgment against improper influence. It does not authorise arbitrary government.

5.3 Independence does not mean institutional isolation

A supervisory authority must cooperate with:

• other supervisory authorities;
• the European Data Protection Board;
• the European Commission under applicable GDPR procedures;
• courts;
• national legislatures when providing advice;
• other regulators where legal mandates overlap.

Cooperation is not the same as subordination.

Illustration

A competition regulator provides evidence to a data protection authority about a digital platform. The authorities discuss jurisdiction and coordinate lawful investigative steps. That is cooperation. If the competition regulator orders the data protection authority to close its privacy investigation, that is interference.

6. Objective independence and the appearance of independence

Article 52 protects not only actual impartiality but also institutional conditions that maintain public confidence.

The CJEU has emphasised that supervisory authorities must remain above suspicion of partiality. The concern is not limited to proof that a minister actually changed a decision. A structure creating a realistic risk of influence may itself be defective.

Illustration

A supervisory authority investigates the Prime Minister’s office. Its investigators are formally employed by that office, their promotions are decided there, and the Prime Minister has an unconditional right to receive information about all investigations. Even if nobody proves that a particular investigator was ordered to change a conclusion, the structure creates an obvious risk of self-censorship and perceived bias. InCommission v Austria, the CJEU identified concerns arising from personal and organisational links with the Federal Chancellery, including the integration of the authority’s office into the Chancellery and broad information rights.

7. Article 52(2): Freedom from external influence

Paragraph 2 focuses on the authority’s member or members, meaning the senior officeholders who direct or constitute the authority under national law.

It creates two distinct obligations:

1. members must remain free from direct and indirect external influence; and
2. members must neither seek nor take instructions from anybody.

These duties apply when members perform GDPR tasks and exercise GDPR powers.

7.1 Direct influence

Direct influence is normally visible and explicit.

Examples

include:

• ordering an authority not to investigate a company;
• requiring ministerial approval before issuing a fine;
• allowing the government to replace the authority’s decision;
• telling the authority how to vote in a particular EDPB matter;
• requiring prior approval before publishing guidance;
• instructing it to prioritise allies and target opponents.

Illustration

A telecommunications company suffers a large data breach. The government directs the authority to describe it as a minor security incident because the state owns shares in the company. This plainly violates Article 52.

7.2 Indirect influence

Indirect influence is harder to detect. It affects decisions through incentives, dependence, institutional pressure or fear of consequences.

Possible forms include:

• threats to future funding;
• control over promotion or career prospects;
• uncertain or arbitrarily renewable terms of office;
• political control over disciplinary proceedings;
• unrestricted demands for information about pending cases;
• dependence on a ministry for essential personnel;
• strategic delay in approving vacant posts;
• removal of office space or technical systems;
• expectations of employment after the member’s term ends;
• informal political messages conveyed through intermediaries.

The “prior compliance” problem

Prior compliance means that the authority adjusts its decisions before receiving any direct instruction because it anticipates what a powerful body wants.

Illustration

The regulator’s chairperson knows that:

• the government strongly supports a particular technology company;
• the government controls the chairperson’s possible reappointment;
• previous regulators who pursued politically sensitive matters were removed. No minister needs to telephone the chairperson. The structure itself encourages cautious, government-friendly decisions. That chilling effect is exactly why Article 52 addresses indirect influence.

8. “Neither seek nor take instructions from anybody”

The member cannot receive instructions, but the provision also prohibits seeking them.

The second prohibition is crucial. Independence can be surrendered voluntarily.

Illustration

Before issuing a decision against a large bank, the authority’s chairperson asks the finance minister: “Would the government prefer a warning or a fine?” Even if the minister did not approach the authority, seeking political instructions is incompatible with Article 52(2).

8.1 Instructions versus legitimate consultation

Not every conversation is an instruction.

Members may legitimately:

• request technical information;
• consult another regulator about overlapping law;
• receive legal submissions from parties;
• participate in EDPB deliberations;
• hear expert evidence;
• receive a court’s binding judgment;
• discuss the authority’s general budget with parliament.

The dividing question is:

Is the communication providing information or applying law, or is it telling the authority what substantive outcome it should reach?

8.2 Internal instructions remain possible

Staff members are subject to the exclusive direction of the authority’s members under Article 52(5). Therefore, the prohibition on instructions does not prevent:

• a chairperson assigning cases;
• the authority adopting internal procedures;
• senior investigators supervising junior staff;
• a collegiate authority taking decisions by majority vote.

Article 52(2) protects the authority from external direction. It does not eliminate lawful internal management.

9. Security of tenure and premature removal

Although terms of appointment and removal are principally addressed in Articles 53 and 54, security of tenure is part of practical independence.

A fixed term means little if the government can terminate it whenever it reorganises the authority or dislikes a decision.

In Commission v Hungary, Hungary ended the data protection supervisor’s term before its scheduled expiry while restructuring the institutional system. The CJEU held that premature termination undermined the required independence.

Illustration

A commissioner is appointed for six years. After two years, the commissioner opens an investigation into government surveillance. Parliament then abolishes the office, immediately recreates substantially the same authority under a new name and appoints a different commissioner. A Member State may generally reform its administration, but restructuring cannot be used to evade protected terms of office. Legitimate early termination may remain possible where objective conditions fixed by law are satisfied, such as:

• serious misconduct;
• incapacity;
• loss of required qualifications;
• a proven serious breach of duties. Those grounds must not become vague devices for political dismissal.

10. A major nuance: Commission adequacy decisions

The supplied commentary states that a supervisory authority “is not bound” by a Commission adequacy decision if it considers the decision non-compliant. That statement is too broad.

The more accurate position is:

• a supervisory authority must be able to examine a complaint concerning an international transfer independently;
• it cannot conclusively declare an EU Commission adequacy decision invalid on its own;
• while the Commission decision remains valid, it is generally binding;
• if the authority considers the complaint well founded and doubts the decision’s validity, the issue must reach a competent national court, which may refer the validity question to the CJEU;
• only the EU courts can finally invalidate an EU act.

Accordingly, Schrems I protects the authority’s ability to investigate complaints. It does not give every supervisory authority unilateral power to cancel an adequacy decision.

Illustration

A person claims that transfers to Country X expose them to unlawful government surveillance. The Commission has adopted an adequacy decision for Country X. The authority cannot dismiss the complaint automatically without examination. But it also cannot simply announce that the Commission’s decision no longer exists. The legality of the EU decision must be resolved through the judicial process.

11. Article 52(3): Incompatible actions and occupations

Paragraph 3 requires members to:

• refrain from actions incompatible with their duties; and
• avoid incompatible occupations during their term, whether paid or unpaid.

The rule protects actual impartiality, the appearance of impartiality and the authority’s reputation.

11.1 “Action” is broader than “occupation”

An incompatible action may be a one-off act, while an occupation normally involves a continuing role.

Examples

of potentially incompatible actions include:

• accepting gifts from a regulated company;
• privately discussing a pending case with its executives;
• disclosing confidential investigative information;
• publicly promising a particular result before hearing the parties;
• taking part in a case involving a close personal or financial interest;
• using confidential information for personal benefit.

Examples

of potentially incompatible occupations include:

• serving as director of a regulated technology company;
• advising controllers on how to respond to the authority’s investigations;
• acting as a lobbyist for the advertising industry;
• holding a political executive role capable of influencing enforcement;
• performing recurring legal work for organisations under the authority’s jurisdiction.

11.2 Paid and unpaid activities

The words “whether gainful or not” prevent members from avoiding the rule by saying that they received no salary.

Illustration

A commissioner is an unpaid trustee of an industry association representing online platforms. The association regularly lobbies the authority. The absence of payment does not remove the conflict risk. Influence, loyalty and reputational interest can exist without remuneration.

11.3 Not every outside activity is automatically prohibited

Article 52 does not necessarily require members to live in complete professional isolation.

Activities may be compatible where national law permits and real conflicts are controlled, for example:

• academic teaching on general legal principles;
• writing scholarly commentary;
• membership of a non-partisan professional association;
• charitable activity unrelated to regulated sectors;
• responsibility for a compatible public mandate, such as freedom-of-information supervision.

The assessment should consider:

1. the nature of the activity;
2. the organisations involved;
3. whether they may appear before the authority;
4. the member’s financial or personal interest;
5. access to confidential information;
6. whether recusal can genuinely solve the problem;
7. public perception of impartiality.

11.4 Recusal versus complete incompatibility

Some conflicts can be addressed by recusal. Others are so extensive that the outside activity itself must stop.

Example

of a manageable conflict A commissioner’s sibling works in a junior role at a company under investigation. The commissioner discloses the relationship and takes no part in that case.

Example

of structural incompatibility The commissioner owns a consultancy that advises dozens of companies on responding to the same authority. Recusal from dozens of matters would hollow out the commissioner’s function. The occupation is likely incompatible with the office itself.

11.5 Post-office employment

Article 52(3) expressly addresses conduct during the term of office. It does not by itself clearly establish a universal post-employment cooling-off period.

Nevertheless, future employment can influence present decisions. National legislation under Article 54 may therefore provide:

• cooling-off periods;
• disclosure obligations;
• restrictions on representing parties before the authority;
• rules on the use of confidential information.

Such restrictions must be clear, proportionate and compatible with other rights.

12. Article 52(4): Adequate resources

Legal powers are useless if the authority lacks the means to exercise them.

Paragraph 4 therefore requires Member States to provide:

• human resources;
• technical resources;
• financial resources;
• premises;
• infrastructure.

These must be sufficient for the effective performance of the authority’s work, including European cooperation.

12.1 Human resources

Adequate staffing is not merely a headcount question. The authority requires appropriate expertise, including:

• data protection law;
• administrative and procedural law;
• information security;
• software systems;
• artificial intelligence;
• digital advertising;
• forensic investigation;
• economics;
• communications;
• international cooperation;
• language and translation skills.

Illustration

An authority responsible for supervising global technology platforms has five lawyers but no technologists capable of analysing algorithms, mobile applications or advertising systems. The authority may exist formally, but it may not possess the human resources needed for effective supervision. Salary conditions may also matter. If the authority cannot recruit or retain qualified staff because remuneration is drastically below comparable public positions, persistent vacancies may become an Article 52 issue.

12.2 Technical resources

Technical resources may include:

• secure computers and networks;
• forensic tools;
• evidence-management systems;
• encrypted communications;
• complaint-handling platforms;
• secure remote-working facilities;
• audit and testing environments;
• cybersecurity protections;
• systems for cross-border case management.

Illustration

A regulator receives highly sensitive evidence relating to health records and surveillance systems but stores it on an insecure shared ministry server accessible to officials outside the authority. This creates both a security problem and a possible independence problem because outsiders may access or monitor investigations.

12.3 Financial resources

Funding must cover more than salaries and rent. It may need to support:

• major investigations;
• external experts;
• forensic examinations;
• translations;
• travel;
• litigation;
• training;
• public-awareness programmes;
• emergency response to large data breaches;
• joint operations with other authorities.

An authority may become timid if it cannot afford to defend its decisions in court. Budgetary weakness can therefore influence enforcement even without an express political instruction.

12.4 Premises and infrastructure

Independent premises need not always mean a completely separate building. The real question is whether the arrangement protects:

• confidentiality;
• secure evidence storage;
• private meetings;
• operational continuity;
• physical access control;
• institutional autonomy.

Sharing a government building is not automatically unlawful. But it becomes problematic if the host ministry controls access, communications, staff or confidential records.

13. What counts as “necessary” resources?

Article 52 does not prescribe a fixed budget or minimum number of employees.

Adequacy depends on context, including:

• population and territorial size;
• number of complaints;
• number and type of controllers;
• presence of major technology companies;
• complexity of processing;
• volume of cross-border cases;
• number of languages;
• litigation workload;
• additional national statutory duties;
• development of emerging technologies.

A small state may not require the same absolute budget as a large state. But a smaller authority may face highly complex cross-border responsibilities if major multinational controllers are established in its territory.

13.1 Resource adequacy is dynamic

A budget that was sufficient five years ago may be insufficient today because of:

• increased complaint volumes;
• AI-based processing;
• larger cybersecurity incidents;
• new cross-border responsibilities;
• inflation;
• expanded national duties.

Member States should therefore review resources periodically rather than treating one historic allocation as permanently sufficient.

13.2 Resources and complaints

In Case C-416/23, decided on 9 January 2025, the CJEU held that a supervisory authority cannot treat complaints as excessive merely because an individual has filed a large number of them. The authority must assess all relevant circumstances rather than rely on quantity alone.

That ruling has an important relationship with Article 52(4). Member States must provide resources adapted to the public’s lawful use of the complaint mechanism. An authority cannot convert chronic understaffing into a reason for denying effective rights.

This does not mean every complaint requires an unlimited investigation. Authorities may apply lawful procedural rules, assess whether a complaint is manifestly unfounded or excessive, and choose proportionate investigative steps. But a lack of resources cannot become a universal defence for inactivity.

14. European cooperation must also be funded

Resources must cover not only domestic work but also:

• mutual assistance;
• one-stop-shop procedures;
• cooperation under Article 60;
• joint operations;
• consistency procedures;
• participation in the EDPB.

Illustration

A national authority receives a cross-border case involving documents in four languages and millions of users. Effective participation may require:

• translators;
• specialist lawyers;
• secure document exchange;
• technical analysts;
• travel to joint meetings;
• staff dedicated to EDPB procedures. A Member State cannot say that European cooperation is optional or must be funded from whatever remains after domestic work.

15. Article 52(5): Choosing and directing staff

Paragraph 5 contains two guarantees:

1. each authority must choose and have its own staff; and
2. those staff must be under the exclusive direction of the authority’s members.

15.1 Choosing its own staff

The authority needs meaningful control over recruitment so it can select people with appropriate:

• qualifications;
• experience;
• integrity;
• security clearance;
• technical expertise;
• independence from conflicts.

Recital 121 indicates that staff may also be chosen through an independent body established under national law. Therefore, the authority need not necessarily perform every administrative recruitment step itself.

A central civil-service system may be compatible where:

• objective procedures apply;
• the authority controls or meaningfully determines selection;
• the government cannot plant unsuitable officials;
• staff remain exclusively directed by the authority.

15.2 “Own staff” does not always require unique employment legislation

Staff may remain public servants and be subject to general rules concerning:

• salary scales;
• pensions;
• leave;
• workplace safety;
• equal-opportunity recruitment;
• professional discipline.

The critical issue is whether another institution can direct their substantive work for the authority.

15.3 Exclusive direction

Only the authority’s members should direct staff concerning:

• case allocation;
• investigative strategy;
• legal analysis;
• evidence requests;
• draft decisions;
• enforcement priorities;
• confidential communications.

Prohibited arrangement

An investigator works at the supervisory authority but remains answerable to a ministry director who writes the investigator’s performance review and can order changes to investigation reports.

Potentially acceptable arrangement

A central payroll office calculates the investigator’s salary, but has no role in hiring decisions, performance assessments, casework or disciplinary control connected to regulatory judgments.

15.4 Staff and independence

The supplied commentary says that independence “does not apply to staff.” That requires qualification.

Article 52(2)’s exact wording concerning freedom from external influence is directed at the authority’s members. Staff are not independent from the members because Article 52(5) expressly places them under the members’ direction.

However, staff must still be institutionally protected against external interference. Otherwise, outsiders could bypass the members and influence investigations through the staff.

The better formulation is:

Staff are not independent of the supervisory authority’s lawful internal hierarchy, but their work must be independent from external direction.

16. Article 52(6): Financial control and separate budgets

Paragraph 6 balances independence with public accountability.

Each authority must:

• be subject to financial control that does not affect its independence; and
• have a separate, public annual budget, although that budget may form part of the overall state budget.

16.1 Financial control is compatible with independence

Recital 118 confirms that independence does not exclude financial monitoring.

Lawful controls may examine:

• whether expenditure was authorised;
• whether procurement rules were followed;
• whether public money was properly accounted for;
• whether fraud or corruption occurred;
• whether financial statements are accurate.

Illustration

A national audit office examines whether the authority properly tendered a contract for cybersecurity services. That is ordinary financial accountability.

16.2 When financial control becomes interference

Financial supervision becomes problematic if it is used to influence regulatory work.

Examples

include:

• refusing reimbursement because an investigation was politically unwelcome;
• requiring case-by-case ministerial approval for hiring experts;
• withholding litigation funds to prevent defence of a fine;
• threatening audit action unless an investigation closes;
• examining confidential files without a legitimate financial purpose;
• blocking travel to EDPB meetings for political reasons. The key question is whether the control concerns lawful use of funds or manipulates substantive decision-making.

16.3 Separate annual budget

A separate budget promotes transparency. It allows the public and legislature to see what resources are allocated to the authority rather than hiding its funding within a ministry’s general expenditure.

“Separate” does not mean that the budget must exist outside the national budget. Article 52 expressly permits it to form part of the overall state or national budget.

The authority should nevertheless have meaningful autonomy over the allocation of approved funds.

Illustration

Parliament allocates €30 million to the authority. The authority decides how much to assign to:

• complaints;
• technology experts;
• litigation;
• public awareness;
• cross-border investigations. That is compatible with budgetary independence, subject to financial law. A ministry should not ordinarily be able to redirect €10 million away from investigations because it dislikes the authority’s enforcement priorities.

17. Independence and accountability

Complete independence does not mean unaccountability.

Supervisory authorities remain accountable through:

• public budgets;
• financial audits;
• annual reports under Article 59;
• transparent appointment rules;
• statutory duties;
• reasoned decisions;
• judicial review under Article 78;
• parliamentary scrutiny at an institutional level;
• EU cooperation and consistency procedures.

17.1 Judicial review does not diminish independence

A court may examine whether the authority:

• interpreted the GDPR correctly;
• respected procedural rights;
• investigated a complaint adequately;
• gave sufficient reasons;
• acted proportionately;
• used its powers lawfully.

Judicial review is different from political control because courts apply law through an independent judicial process.

Illustration

A company challenges a fine and argues that the authority misunderstood the lawful-basis provisions. A court annuls the decision. The court has not improperly instructed the authority. It has exercised legal review, which is part of the rule-of-law framework.

17.2 Parliamentary scrutiny must respect boundaries

A parliament may:

• examine annual reports;
• debate institutional performance;
• legislate within EU-law limits;
• approve budgets;
• question general enforcement delays.

It should not direct the outcome of a pending individual case.

A question such as “Why are complaints taking four years?” concerns institutional accountability.

A direction such as “Close the investigation into Company Z” interferes with regulatory independence.

18. A practical independence test

When assessing whether an authority is genuinely independent, ask the following questions:

Decision-making

• Can another body approve, cancel or replace its decisions?
• Can anyone instruct it whom to investigate?
• Can political officials access pending case files without legal justification?

Members

• Are appointments transparent?
• Are terms fixed and secure?
• Are dismissal grounds objective and predetermined?
• Are members protected against career-related pressure?

Conflicts

• Can members hold roles in regulated companies?
• Are gifts and outside interests regulated?
• Are recusal and disclosure systems effective?

Resources

• Does the authority have enough qualified staff?
• Can it obtain technical expertise?
• Can it handle complaints within reasonable periods?
• Can it defend decisions before courts?

Staffing

• Who selects investigators?
• Who evaluates and disciplines them?
• Can a ministry direct or transfer them?

Budget

• Is the authority’s budget identifiable and public?
• Can it allocate approved resources?
• Can funding be withheld to influence a case?

The assessment must consider the whole system. A weakness in one area may undermine safeguards elsewhere.

19. Final assessment

Article 52 treats independence as a practical condition, not a ceremonial label.

A genuinely independent supervisory authority must possess:

• legal independence, because no outside body can dictate outcomes;
• personal independence, because members are protected against influence and conflicts;
• operational independence, because it controls its staff and investigations;
• technical independence, because it has secure systems and expertise;
• financial independence, because its work cannot be disabled through budgetary pressure;
• institutional credibility, because its structure remains above reasonable suspicion of partiality.

At the same time, independence is not immunity. The authority remains subject to law, financial scrutiny, transparency requirements and judicial review.

The governing distinction is this:

Accountability checks whether the authority acts lawfully and uses public resources properly. Interference tries to control what the authority decides.

Article 52 permits the first and prohibits the second.

In the simplest terms, an authority is not truly independent merely because nobody openly orders it to change a decision. It must also be protected from the quieter pressures that can produce the same result: insecure tenure, controlled staff, conflicts of interest, confidential monitoring, inadequate resources and financial dependence. Article 52 is designed to stop both the visible command and the invisible pressure.