Cooperation with Supervisory Authorities

In order to relieve companies operating across borders from having to deal with multiple supervisory authorities in the various EU Member States, the GDPR introduces a one-stop-shop mechanism under which a lead supervisory authority is designated as a company’s exclusive point of contact. To avoid conflicts between the various supervisory authorities and to minimise the risk of inconsistent application of the GDPR within the EU, cooperation and consistency mechanisms were introduced. This chapter describes the criteria for determining the competent supervisory authority and how the one-top-shop mechanism and the cooperation between and with the authorities work.