EU Court of Justice · 15 June 2021
Facebook Ireland v Gegevensbeschermingsautoriteit
In plain English
Under the one-stop shop the lead authority normally handles cross-border cases. But another national authority may take a company to court in its own country in the situations where the GDPR lets it act, if it respects the cooperation procedures.
What the court ruled
a supervisory authority of a Member State which … has the power to bring any alleged infringement of that regulation to the attention of a court of that Member State and, where necessary, to initiate or engage in legal proceedings, may exercise that power in relation to an instance of cross-border data processing even though it is not the ‘lead supervisory authority’ …
Related
The official text is quoted word for word from the English version of the source named under it; only the version published in the court’s own records is authoritative. The plain-English line is Fino’s own summary, not legal advice.