Interaction with the Supervisory Authorities

Abstract

The GDPR introduces procedural changes that entities should be aware of when faced to deal with the Supervisory Authorities. So far, data processing entities were often forced to interact with multiple national Supervisory Authorities at the same time. To eliminate this burden, the GDPR introduces a one-stop-shop mechanism pursuant to which a Lead Supervisory Authority will be determined—among the different Supervisory Authorities concerned—to act as sole contact point for the entity. In order to avoid conflicts between the different Supervisory Authorities concerned and minimise the risk of an incoherent application of the GDPR throughout the EU, cooperation and consistency mechanisms have been introduced. This chapter lays down the details on how to determine the competent Supervisory Authority, as well on the one-stop-shop, the cooperation and the consistency mechanisms.