Who this is relevant for
Potential concerns include arbitrary government surveillance, expansive biometric identification, intrusive surveillance of lawyers or dissidents, or systemic data-sharing practices affecting fundamental rights. A purely contractual data-access dispute may be better dealt with through a domestic data protection authority.
Scope and procedure
The OHCHR registry identifies Ana Brian Nougrères as current mandate-holder; the website must revalidate this periodically. The mandate may receive credible information and communicate concerns, but it cannot issue GDPR administrative fines or order a controller to erase data under EU law.
Evidence, strategy and submission preparation
Document precisely which personal information or communications were accessed, collected, used or disclosed, by whom and under what authority. Analyse the evidence of interference, its impact, relevant safeguards and possible necessity and proportionality questions. Preserve chain of custody and avoid publicly exposing additional sensitive data during the complaint process.
Practical checklist
- Record the technology or conduct alleged to interfere with private life.
- Identify responsible authorities or businesses and affected individuals.
- Preserve verifiable notices, access logs, legal orders or technical findings.
- Distinguish national GDPR or privacy-remedy options from UN advocacy.
- Assess the confidentiality implications of attaching sensitive personal data.
Key considerations and documents
| Issue | What to verify |
|---|---|
| State surveillance | Authority, scope, safeguards, oversight and individual harm. |
| Biometric monitoring | Data types, consent or lawful basis issues, accuracy and impact. |
| Cross-border data transfer | Actors, purposes, known routes and alleged rights consequences. |
| GDPR violation | Generally a domestic or EU supervisory-authority route, not a UN ruling. |
What outcomes and limitations should you expect?
A Special Procedures intervention is discretionary, non-judicial and not an enforcement path for a GDPR penalty. Where immediate data-protection relief is needed, competent domestic regulators and courts may be more suitable.
How our team can help
We can assess whether the allegations are within this specific mandate, build a dated chronology, identify reliable corroborating documents, address consent and disclosure risks, and prepare a concise draft for the applicable OHCHR route. The mandate-holder independently decides whether to act; we cannot secure an urgent appeal or compel correspondence.
Frequently asked questions
Is there a UN Special Rapporteur on GDPR?
No. The relevant thematic mandate concerns the right to privacy; GDPR enforcement belongs to authorised EU and national bodies.
Can the Rapporteur order Google or a government to delete records?
Not through a binding administrative order. Any communication is independent and does not replace applicable remedies.
Can technology experts help?
Independent expert evidence may help verify factual claims, subject to lawful access and data protection.
Request an assessment
Request an assessment distinguishing privacy rights advocacy from national and EU data-protection remedies.
Next step: Request a confidential case assessment.
Related pages
- Government Surveillance, Privacy and UN Human Rights Mechanisms
- Human Rights Evidence Collection and Case Documentation
- UN Special Rapporteur Complaint Preparation
Official references
- OHCHR current thematic mandate registry
- OHCHR Special Procedures submission guidance
- EU European Data Protection Board
Independent informational website. Not an official United Nations or OHCHR service. UN mechanisms assess matters independently; filing does not guarantee intervention, an outcome or a particular timeline.