CERN’s independent supervisory authority in matters of data protection - the Data Protection Commission (DPC) - is defined under section XI of OC 11.

The DPC’s mandate is to monitor compliance with ensure the application of OC 11 accross the Organization, and to evaluate and investigate complaints lodged by data subjects.

The establishment of an independent supervisory authority reflects best practices in CERN's Member States and peer intergovernmental organisations, and provides assurance to individuals and partners that personal data is handled with due care and respect.

The DPC is composed of three external data protection experts, appointed by the Director-General for an initial three-year term, which may be extended once for up to three years. The current member were appointed on the 01.02.2024.