Article 66 GDPR
Urgency procedure

1. In exceptional circumstances, where the supervisory authority concerned considers that there is an urgent need to act to protect the rights and freedoms of data subjects, it may, by way of derogation from the consistency mechanism referred to in Article 63, 64, and 65, or from the procedure referred to in Article 60, immediately adopt provisional measures intended to produce legal effects within the territory of its Member State for a limited period not exceeding three months. The supervisory authority shall immediately inform the other supervisory authorities concerned, the European Data Protection Board, and the Commission of those measures and the reasons for their adoption.

2. If the supervisory authority has taken a measure under paragraph 1 and considers that it is urgent to adopt measures of a definitive nature, it may request an urgent opinion or binding decision from the European Data Protection Board, justifying its request for such an opinion or decision.

3. The supervisory authority may request the European Data Protection Board to urgently issue an opinion or, as the case may be, a binding decision, justifying its request for such an opinion or decision, including justifying the urgent need for action - if the competent supervisory authority has not taken an appropriate measure in a situation where there is an urgent need to take action to protect the rights and freedoms of data subjects.

4. By way of derogation from Article 64(3) and Article 65(2), the European Data Protection Board shall adopt the opinion or binding decision referred to in paragraphs 2 and 3 of this Article, issued as a matter of urgency, within two weeks by a simple majority of its members.