Cooperation between authorities

Cooperation between DPAs is essential to ensure the uniform and effective application of the GDPR across Europe. For cross-border cases, the GDPR establishes a one-stop-shop mechanism: the DPA that is in the lead, called the Lead Supervisory Authority (LSA), acts as a sole interlocutor for the organisation under investigation, and cooperates with the Concerned Supervisory Authorities (CSAs). In the vast majority of cases, the authorities reach a consensus, but when it is not the case, the matter may be referred to the EDPB for a binding decision.
DPAs also cooperate by providing each other with mutual assistance and carrying out joint operations. The EDPB puts in place initiatives and projects to ensure smooth and effective cooperation among DPAs.