Set by the law · GDPR Art. 56(1)
Lead supervisory authority and one-stop shop
In plain English
For cross-border processing, the authority of the country where a company has its main or single EU establishment leads the case and is the company's only contact point: the one-stop shop.
The official text
the supervisory authority of the main establishment or of the single establishment of the controller or processor shall be competent to act as lead supervisory authority for the cross-border processing carried out by that controller or processor
The lead supervisory authority shall be the sole interlocutor of the controller or processor for the cross-border processing carried out by that controller or processor.
27 decisions on Fino cite Article 56 GDPR. See them →
Related
The official text is quoted word for word from the English version of the source named under it; only the version published in the Official Journal of the EU is legally binding. The plain-English line is Fino’s own summary, not legal advice.