One-Stop-Shop case digests

These thematic case digests analyse decisions related to different Articles of the GDPR and include examples of final One-Stop-Shop (OSS) decisions taken from the EDPB’s public register.

The OSS thematic digests are a valuable resource to showcase how Supervisory Authorities (SAs) work together to enforce the GDPR. They offer an opportunity to read final decisions taken by, and involving, different SAs relating to specific data subject rights.

The projects are conducted by external experts. As part of the Support Pool of Experts programme, the EDPB may commission contractors to provide reports and tools on specific topics. The views expressed in the projects are those of their authors and they do not necessarily reflect the official position of the EDPB. The EDPB does not guarantee the accuracy of the information included in the projects. Neither the EDPB nor any person acting on the EDPB’s behalf may be held responsible for any use that may be made of the information contained in the deliverables.
 

  • One-Stop-Shop case digest on right to object and right to erasure

    22 May 2023

    The one-stop-shop thematic case digest on the right to object and right to erasure offers insights in how data protection authorities (DPAs) analyse the internal processes implemented within organisations to comply with these rights, lists the most frequent infringements and gives an overview of which corrective measures have been issued. Cases cover for example the exercise of the right to object to direct marketing or the wish of individuals to erase their account or online data profile.

    The EDPB commissioned the one-stop-shop case digest as part of the Support Pool of Experts programme, which aims to support cooperation among DPAs by providing expertise and tools related to enforcement.

    Project conducted by external expert Prof. Alessandro Mantelero and completed in December 2022.

     
    Objective

    Thematic one-stop-shop case digests are drafted on the basis of one-stop-shop decisions taken from the EDPB’s public register (based on Article 60 of the GDPR). Such case digests complement the EDPB's public register by selecting and presenting the most important decisions on a given theme and providing an overview and aggregate results of relevant decisions on this theme.