The decision should be agreed jointly by the lead supervisory authority and the supervisory authorities concerned and should be directed towards the main or single establishment of the controller or processor and be binding on the controller and processor. The controller or processor should take the necessary measures to ensure compliance with this Regulation and the implementation of the decision notified by the lead supervisory authority to the main establishment of the controller or processor as regards the processing activities in the Union.
GDPR Recital EN
Recital 126
Related across sources
News The Italian Supervisory Authority fined a company 120 000 EUR for tracking five employees who drove company cars Guidance Version history Guidance Guidelines 9/2022 on personal data breach notification under GDPR Guidance Guidelines 05/2022 on the use of facial recognition technology in the area of law enforcement Enforcement Municipality of Ede: Insufficient legal basis for data processing Enforcement Municipality of Delft: Insufficient legal basis for data processing