Cooperation between authorities

Cooperation between DPAs is essential to ensure the uniform and effective application of the GDPR across Europe. For cross-border cases, the GDPR establishes a one-stop-shop mechanism: the DPA that is in the lead, called the Lead Supervisory Authority (LSA), acts as a sole interlocutor for the organisation under investigation, and cooperates with the Concerned Supervisory Authorities (CSAs). In the vast majority of cases, the authorities reach a consensus, but when it is not the case, the matter may be referred to the EDPB for a binding decision.
DPAs also cooperate by providing each other with mutual assistance and carrying out joint operations. The EDPB puts in place initiatives and projects to ensure smooth and effective cooperation among DPAs.

Guidance

Template Complaint form and Template Acknowledgement of receipt

Other guidance
#GDPR enforcement #Cooperation between authorities
Read more about
Template Complaint form and Template Acknowledgement of receipt

Guidelines 03/2021 on the application of Article 65(1)(a) GDPR

Guideline
#GDPR enforcement #Cooperation between authorities
Read more about
Guidelines 03/2021 on the application of Article 65(1)(a) GDPR

Enforcement

Urgent Binding Decision 01/2023 requested by the Norwegian SA for the ordering of final measures regarding Meta Platforms Ireland Ltd (Art. 66(2) GDPR)

EDPB Binding Decisions
#Legal basis #GDPR enforcement #Fines #Cooperation between authorities
Read more about
Urgent Binding Decision 01/2023 requested by the Norwegian SA for the ordering of final measures regarding Meta Platforms Ireland Ltd (Art. 66(2) GDPR)

Binding Decision 2/2023 on the dispute submitted by the Irish SA regarding TikTok Technology Limited (Art. 65 GDPR)

EDPB Binding Decisions
#Basic principles #Children #Privacy by design and by default #GDPR enforcement #Cooperation between authorities
Read more about
Binding Decision 2/2023 on the dispute submitted by the Irish SA regarding TikTok Technology Limited (Art. 65 GDPR)

Policy work

EDPB Annual Report 2025

Reports, statements, and letters
#Anonymisation/pseudonymisation #GDPR enforcement #Cooperation between authorities #Cross-regulatory cooperation #International cooperation #Artificial intelligence #Technology
Read more about
EDPB Annual Report 2025

Contribution of the EDPB to the European Commission’s evaluation of the Data Protection Law Enforcement Directive (‘‘LED’’) under Article 62 LED

Other policy document
#Cooperation between authorities #GDPR enforcement #Law enforcement
Read more about
Contribution of the EDPB to the European Commission’s evaluation of the Data Protection Law Enforcement Directive (‘‘LED’’) under Article 62 LED

Enforcement support

Report on the use of SPE external experts in 2025

Support Pool of Experts
#GDPR enforcement #Artificial intelligence #Cooperation between authorities
Read more about
Report on the use of SPE external experts in 2025

One-Stop-Shop case digest on the legal basis of "legitimate interest"

Support Pool of Experts
#Cooperation between authorities #GDPR enforcement
Read more about
One-Stop-Shop case digest on the legal basis of "legitimate interest"

Compliance instruments

Opinion 04/2024 on the notion of main establishment of a controller in the Union under Art. 4.16(a) GDPR

Opinion of the Board (Art. 64)
#Controller/processor #GDPR enforcement #Cooperation between authorities
Read more about
Opinion 04/2024 on the notion of main establishment of a controller in the Union under Art. 4.16(a) GDPR

Opinion 8/2019 on the competence of a supervisory authority in case of a change in circumstances relating to the main or single establishment

Opinion of the Board (Art. 64)
#Controller/processor #GDPR enforcement #Cooperation between authorities
Read more about
Opinion 8/2019 on the competence of a supervisory authority in case of a change in circumstances relating to the main or single establishment

Internal procedure

Internal EDPB Document 3/2019 on internal guidance on Article 64(2) GDPR - version 2

Internal document
#Cooperation between authorities
Read more about
Internal EDPB Document 3/2019 on internal guidance on Article 64(2) GDPR - version 2

EDPB Document on Process guide for the selection and the handling of strategic cases

Internal document
#GDPR enforcement #Cooperation between authorities
Read more about
EDPB Document on Process guide for the selection and the handling of strategic cases