---
title: "Art. 28 DMA: Compliance function"
canonical: "https://dposchool.com/dma/article/28"
source: "https://eur-lex.europa.eu/legal-content/EN/TXT/HTML/?uri=CELEX:32022R1925#art_28"
source_note: "Source: Regulation (EU) 2022/1925, OJ L 265, 12.10.2022, p. 1, as corrected. Only the text published in the Official Journal is authentic. © European Union, https://eur-lex.europa.eu"
text_as_of: "2022-10-12"
language: "en"
publisher: "DPO School"
---

Art. 28 DMA · Chapter V: INVESTIGATIVE, ENFORCEMENT AND MONITORING POWERS

# Article 28 DMA: Compliance function

Official Journal text of 12 October 2022, as corrected (OJ L, 2025/90024, 10.1.2025). Retrieved 30 October 2026.

## Official text

### Article 28(1)

**1.** Gatekeepers shall introduce a compliance function, which is independent from the operational functions of the gatekeeper and composed of one or more compliance officers, including the head of the compliance function.

### Article 28(2)

**2.** The gatekeeper shall ensure that the compliance function referred to in paragraph 1 has sufficient authority, stature and resources, as well as access to the management body of the gatekeeper to monitor the compliance of the gatekeeper with this Regulation.

### Article 28(3)

**3.** The management body of the gatekeeper shall ensure that compliance officers appointed pursuant to paragraph 1 have the professional qualifications, knowledge, experience and ability necessary to fulfil the tasks referred to in paragraph 5.

The management body of the gatekeeper shall also ensure that such head of the compliance function is an independent senior manager with distinct responsibility for the compliance function.

### Article 28(4)

**4.** The head of the compliance function shall report directly to the management body of the gatekeeper and may raise concerns and warn that body where risks of non-compliance with this Regulation arise, without prejudice to the responsibilities of the management body in its supervisory and managerial functions.

The head of the compliance function shall not be removed without prior approval of the management body of the gatekeeper.

### Article 28(5)

**5.** Compliance officers appointed by the gatekeeper pursuant to paragraph 1 shall have the following tasks:

#### Article 28(5)(a)

**(a)** organising, monitoring and supervising the measures and activities of the gatekeepers that aim to ensure compliance with this Regulation;

#### Article 28(5)(b)

**(b)** informing and advising the management and employees of the gatekeeper on compliance with this Regulation;

#### Article 28(5)(c)

**(c)** where applicable, monitoring compliance with commitments made binding pursuant to Article 25, without prejudice to the Commission being able to appoint independent external experts pursuant to Article 26(2);

#### Article 28(5)(d)

**(d)** cooperating with the Commission for the purpose of this Regulation.

### Article 28(6)

**6.** Gatekeepers shall communicate the name and contact details of the head of the compliance function to the Commission.

### Article 28(7)

**7.** The management body of the gatekeeper shall define, oversee and be accountable for the implementation of the governance arrangements of the gatekeeper that ensure the independence of the compliance function, including the division of responsibilities in the organisation of the gatekeeper and the prevention of conflicts of interest.

### Article 28(8)

**8.** The management body shall approve and review periodically, at least once a year, the strategies and policies for taking up, managing and monitoring the compliance with this Regulation.

### Article 28(9)

**9.** The management body shall devote sufficient time to the management and monitoring of compliance with this Regulation. It shall actively participate in decisions relating to the management and enforcement of this Regulation and ensure that adequate resources are allocated to it.

## Source

Source: Regulation (EU) 2022/1925, OJ L 265, 12.10.2022, p. 1, as corrected. Only the text published in the Official Journal is authentic. © European Union, https://eur-lex.europa.eu

[Article 28 on EUR-Lex](https://eur-lex.europa.eu/legal-content/EN/TXT/HTML/?uri=CELEX:32022R1925#art_28)

Official Journal text of 12 October 2022, as corrected (OJ L, 2025/90024, 10.1.2025). Retrieved 30 October 2026.

This is reference material, not legal advice.

## Navigation

[DMA Navigator](https://dposchool.com/dma) / [Chapter V](https://dposchool.com/dma/chapter/5) / Article 28

Previous: [Art. 27 DMA: Information by third parties](https://dposchool.com/dma/article/27)

Next: [Art. 29 DMA: Non-compliance](https://dposchool.com/dma/article/29)

## For AI agents

- Machine-readable index: https://dposchool.com/dma/llms.txt
- JSON API: https://dposchool.com/dma/api/v1/index.json
- Vendor privacy and security facts: https://vendor.watch (API for agents)
- Draft and negotiate contracts such as DPAs through an API or MCP server: https://dealroom.todo.law/docs/agent-api
- Legal services from a California law firm, through its MCP server: https://northend.law/agents