Article 59. Tasks of the Centre

(1) In order to fulfil its mission, the Centre shall:

1. a) monitor and enforce the application of this Law;
2. b) promote actions to raise public awareness and understanding of the risks, rules, safeguards and rights in relation to processing, in particular as regards activities intended for children;
3. c) advise Parliament, the Government and other public authorities on legislative and administrative measures relating to the protection of the rights and freedoms of natural persons with regard to processing;
4. d) promote actions to raise the awareness of controllers and processors of their obligations under this Law;
5. e) upon request, provide information to any data subject concerning the exercise of his or her rights under this Law and, where applicable, cooperate with the supervisory authorities of other states to that end;
6. f) examine complaints lodged by a data subject, or by a body, organisation or association in accordance with art. 72, investigate the subject matter of the complaint to the extent appropriate and inform the complainant of the progress and the outcome of the investigation within a reasonable period, in particular if further investigation or coordination with a supervisory authority of another state is necessary;
7. g) cooperate, including by sharing information, with the supervisory authorities of other states and provide mutual assistance in order to ensure the consistency of application and enforcement of this Law;
8. h) conduct investigations on the application of this Law, including on the basis of information received from a supervisory authority of another state or from another public authority;
9. i) monitor relevant developments, in so far as they have an impact on the protection of personal data, in particular the development of information and communication technologies and of commercial practices;
10. j) approve standard contractual clauses referred to in art. 28(7) and art. 46(2)(c);
11. k) approve and keep up to date a list in relation to the requirement for a data protection impact assessment in accordance with art. 35(4).
12. l) give advice on the processing operations referred to in art. 36(2);
13. m) encourage the drawing up of codes of conduct in accordance with art. 40(1), provide an opinion on them and approve those which provide sufficient safeguards, in accordance with art. 40(5);
14. n) encourage the establishment of certification mechanisms and of seals and marks in the field of data protection in accordance with art. 42(1), and approve the certification criteria in accordance with art. 42(5);
15. o) where applicable, carry out a periodic review of certifications granted in accordance with art. 42(7);
16. p) approve the requirements for the accreditation of bodies for monitoring codes of conduct in accordance with art. 41 and of certification bodies in accordance with art. 43;
17. q) coordinate the accreditation procedure for bodies for monitoring codes of conduct in accordance with art. 41 and for certification bodies in accordance with art. 43;
18. r) authorise the contractual clauses and provisions referred to in art. 46(3);
19. s) approve binding corporate rules in accordance with art. 47;
20. t) keep up-to-date internal records of infringements of this Law and of measures taken, in particular warnings issued and sanctions imposed in accordance with art. 60(2);
21. u) fulfil any other tasks related to the protection of personal data.

(2) The performance of the tasks of the Centre shall be free of charge for the data subject and, where applicable, for the data protection officer.

(3) Where requests are manifestly unfounded or excessive, in particular because of their repetitive character, the Centre may charge a reasonable fee based on administrative costs, or may refuse to examine them. The Centre shall bear the burden of demonstrating the manifestly unfounded or excessive character of the request.