GDPR Art. 60 EN
LLM context A cited markdown file you can paste into your AI assistant (ChatGPT, Claude, a RAG or project knowledge base) to ground it in this article. Contains: the article text, related recitals, cases citing it, enforcement stats and top fines, guidance, and related topics. Everything links back to its source on overview.legal — legal information, not advice.

Cooperation between the lead supervisory authority and the other supervisory authorities concerned

Supervisory Authorities Supervision
In force — consolidated2016-05-04 · CELEX 02016R0679-20160504 · ELI ↗
Version history 2
  • 2016-05-04in force CELEX 02016R0679-20160504
  • 2016-04-27 CELEX 32016R0679
  1. 1.

    The lead supervisory authority shall cooperate with the other supervisory authorities concerned in accordance with this Article in an endeavour to reach consensus. The lead supervisory authority and the supervisory authorities concerned shall exchange all relevant information with each other.

    Supervisory Authorities Supervision 36
  2. 2.

    The lead supervisory authority may request at any time other supervisory authorities concerned to provide mutual assistance pursuant to Article 61 and may conduct joint operations pursuant to Article 62, in particular for carrying out investigations or for monitoring the implementation of a measure concerning a controller or processor established in another Member State.

    Monitoring Processors Supervisory Authorities 15
  3. 3.

    The lead supervisory authority shall, without delay, communicate the relevant information on the matter to the other supervisory authorities concerned. It shall without delay submit a draft decision to the other supervisory authorities concerned for their opinion and take due account of their views.

    Supervisory Authorities Supervision 69
  4. 4.

    Where any of the other supervisory authorities concerned within a period of four weeks after having been consulted in accordance with paragraph 3 of this Article, expresses a relevant and reasoned objection to the draft decision, the lead supervisory authority shall, if it does not follow the relevant and reasoned objection or is of the opinion that the objection is not relevant or reasoned, submit the matter to the consistency mechanism referred to in Article 63.

    Supervisory Authorities Supervision 69
  5. 5.

    Where the lead supervisory authority intends to follow the relevant and reasoned objection made, it shall submit to the other supervisory authorities concerned a revised draft decision for their opinion. That revised draft decision shall be subject to the procedure referred to in paragraph 4 within a period of two weeks.

    Supervisory Authorities Supervision 36
  6. 6.

    Where none of the other supervisory authorities concerned has objected to the draft decision submitted by the lead supervisory authority within the period referred to in paragraphs 4 and 5, the lead supervisory authority and the supervisory authorities concerned shall be deemed to be in agreement with that draft decision and shall be bound by it.

    Supervisory Authorities Supervision 26
  7. 7.

    The lead supervisory authority shall adopt and notify the decision to the main establishment or single establishment of the controller or processor, as the case may be and inform the other supervisory authorities concerned and the Board of the decision in question, including a summary of the relevant facts and grounds. The supervisory authority with which a complaint has been lodged shall inform the complainant on the decision.

    Processors Supervisory Authorities Supervision 32
  8. 8.

    By derogation from paragraph 7, where a complaint is dismissed or rejected, the supervisory authority with which the complaint was lodged shall adopt the decision and notify it to the complainant and shall inform the controller thereof.

    Supervisory Authorities Supervision Controllers 20
  9. 9.

    Where the lead supervisory authority and the supervisory authorities concerned agree to dismiss or reject parts of a complaint and to act on other parts of that complaint, a separate decision shall be adopted for each of those parts of the matter. The lead supervisory authority shall adopt the decision for the part concerning actions in relation to the controller, shall notify it to the main establishment or single establishment of the controller or processor on the territory of its Member State and shall inform the complainant thereof, while the supervisory authority of the complainant shall adopt the decision for the part concerning dismissal or rejection of that complaint, and shall notify it to that complainant and shall inform the controller or processor thereof.

    Processors Supervisory Authorities Supervision 12
  10. 10.

    After being notified of the decision of the lead supervisory authority pursuant to paragraphs 7 and 9, the controller or processor shall take the necessary measures to ensure compliance with the decision as regards processing activities in the context of all its establishments in the Union. The controller or processor shall notify the measures taken for complying with the decision to the lead supervisory authority, which shall inform the other supervisory authorities concerned.

    Processors Supervisory Authorities Supervision 12
  11. 11.

    Where, in exceptional circumstances, a supervisory authority concerned has reasons to consider that there is an urgent need to act in order to protect the interests of data subjects, the urgency procedure referred to in Article 66 shall apply.

    Supervisory Authorities Supervision 13
  12. 12.

    The lead supervisory authority and the other supervisory authorities concerned shall supply the information required under this Article to each other by electronic means, using a standardised format.

    Supervisory Authorities Supervision 5

Enforcement

Cited in 2 fines totalling €57.8K

Top authority: 🇷🇴ANSPDCP (Romania) (1) · median fine €57,839 · see all enforcement for Art. 60 →

Connections by provision

60(1) 4 Case Law 31 Guidance 1 Literature .md
Case Law 4
Judgment of the General Court (Tenth Chamber, Extended Composition) of 29 January 2025 (Extracts).#Data Protection Commission v European Data Protection Board.#Protection of personal data – Article 65(1)(a) of Regulation (EU) 2016/679 – Binding decision instructing a lead supervisory authority to broaden the scope of its investigation and issue a new draft decision – Competence of the European Data Protection Board.#Joined Cases T-70/23, T-84/23 and T-111/23. Judgment of the Court (Grand Chamber), 8 April 2014.#European Commission v Hungary.#Failure of a Member State to fulfil obligations — Directive 95/46/EC — Protection of individuals with regard to the processing of personal data and the free movement of such data — Article 28(1) — National supervisory authorities — Independence — National legislation prematurely bringing to an end the term served by the supervisory authority — Creation of a new supervisory authority and appointment of another per ¶52 Judgment of the General Court (Tenth Chamber, Extended Composition) of 29 January 2025 (Extracts).#Data Protection Commission v European Data Protection Board.#Protection of personal data – Article 65(1)(a) of Regulation (EU) 2016/679 – Binding decision instructing a lead supervisory authority to broaden the scope of its investigation and issue a new draft decision – Competence of the European Data Protection Board.#Joined Cases T-70/23, T-84/23 and T-111/23. ¶24 Judgment of the Court (Grand Chamber), 8 April 2014.#European Commission v Hungary.#Failure of a Member State to fulfil obligations — Directive 95/46/EC — Protection of individuals with regard to the processing of personal data and the free movement of such data — Article 28(1) — National supervisory authorities — Independence — National legislation prematurely bringing to an end the term served by the supervisory authority — Creation of a new supervisory authority and appointment of another per
Guidance 31
Opinion 04/2024 on the notion of main establishment of a controller in the Union under Art. 4.16(a) GDPR EDPB-EDPS Joint Opinion 01/2023 on the Proposal for a Regulation of the European Parliament and of the Council laying down additional procedural rules relating to the enforcement of Regulation (EU) 2016/679 Guidelines 09/2020 on relevant and reasoned objection under Regulation 2016/679 EDPB Annual Report 2022 Guidelines 06/2022 on the practical implementation of amicable settlements Guidelines 03/2021 on the application of Article 65(1)(a) GDPR Guidelines 02/2022 on the application of Article 60 GDPR ¶36 Guidelines 06/2022 on the practical implementation of amicable settlements +23 more
Literature 1
If it ain’t broke, don’t fix it? Ten improvements for the upcoming tenth anniversary of the General Data Protection Regulation
60(2) 15 Guidance .md
Guidance 15
Guidelines 02/2022 on the application of Article 60 GDPR Guidelines 03/2021 on the application of Article 65(1)(a) GDPR EDPB Annual Report 2022 ¶69 Guidelines 02/2022 on the application of Article 60 GDPR ¶2 Guidelines 02/2022 on the application of Article 60 GDPR ¶58 Guidelines 02/2022 on the application of Article 60 GDPR ¶60 Guidelines 02/2022 on the application of Article 60 GDPR ¶61 Guidelines 02/2022 on the application of Article 60 GDPR +7 more
60(3) 22 Case Law 46 Guidance 1 News .md
Case Law 22
Judgment of the General Court (Tenth Chamber, Extended Composition) of 16 July 2025.#Lisa Ballmann v European Data Protection Board.#Protection of personal data – Complaint against the controller of personal data of users of an online social network in the European Union – Article 65(1)(a) of Regulation (EU) 2016/679 – Binding decision of the European Data Protection Board – Complainant’s request for access to the file prepared for the purposes of the binding decision – Refusal to grant access – Order of the General Court (Tenth Chamber) of 29 April 2025.#Meta Platforms Ireland Ltd v European Data Protection Board.#Action for annulment – Protection of personal data – Opinion of the European Data Protection Board on valid consent in the context of ‘consent or pay’ models implemented by large online platforms – Article 64(2) of Regulation (EU) 2016/679 – Act not open to challenge – Inadmissibility – Liability – Damage – Causal link – Action manifestly lacking any foundation in law.#Case T Judgment of the General Court (Tenth Chamber, Extended Composition) of 29 January 2025 (Extracts).#Data Protection Commission v European Data Protection Board.#Protection of personal data – Article 65(1)(a) of Regulation (EU) 2016/679 – Binding decision instructing a lead supervisory authority to broaden the scope of its investigation and issue a new draft decision – Competence of the European Data Protection Board.#Joined Cases T-70/23, T-84/23 and T-111/23. BVwG - W254 2321912-1 Judgment of the Court (Grand Chamber) of 10 February 2026.#WhatsApp Ireland Ltd v European Data Protection Board.#Appeal – Protection of natural persons with regard to the processing of personal data – Regulation (EU) 2016/679 – Article 63 – Consistency mechanism – Article 65 – Dispute resolution by the European Data Protection Board – Binding decision – Action for annulment – First paragraph of Article 263 TFEU – Act open to challenge – Fourth paragraph of Article 263 TFEU – Condition that the Order of the General Court (Fourth Chamber, Extended Composition) of 7 December 2022.#WhatsApp Ireland Ltd v European Data Protection Board.#Action for annulment – Protection of personal data – Draft decision of the lead supervisory authority – Resolution of disputes between supervisory authorities by the European Data Protection Board – Binding decision – Article 60(4) and Article 65(1)(a) of Regulation (EU) 2016/679 – Act not open to challenge – Preparatory act – Lack of individual concern.#Ca Google LLC v CNIL Judgment of the Court (Grand Chamber) of 15 June 2021.#Facebook Ireland Ltd and Others v Gegevensbeschermingsautoriteit.#Request for a preliminary ruling from the Hof van beroep te Brussel.#Reference for a preliminary ruling – Protection of natural persons with regard to the processing of personal data – Charter of Fundamental Rights of the European Union – Articles 7, 8 and 47 – Regulation (EU) 2016/679 – Cross-border processing of personal data – ‘One-stop shop’ mechanism – Sincere and effecti +14 more
Guidance 46
Opinion 04/2024 on the notion of main establishment of a controller in the Union under Art. 4.16(a) GDPR EDPB Annual Report 2021 Guidelines 02/2022 on the application of Article 60 GDPR Guidelines 03/2021 on the application of Article 65(1)(a) GDPR EDPB Annual Report 2022 EDPB-EDPS Joint Opinion 01/2023 on the Proposal for a Regulation of the European Parliament and of the Council laying down additional procedural rules relating to the enforcement of Regulation (EU) 2016/679 EDPB Article 97 GDPR application report: GDPR successful but improvements needed Guidelines 06/2022 on the practical implementation of amicable settlements +38 more
News 1
European Parliament calls on Commission to open infringement proceedings against Ireland
60(4) 22 Case Law 46 Guidance 1 Literature .md
Case Law 22
Meta Platforms v noyb Judgment of the General Court (Tenth Chamber, Extended Composition) of 16 July 2025.#Lisa Ballmann v European Data Protection Board.#Protection of personal data – Complaint against the controller of personal data of users of an online social network in the European Union – Article 65(1)(a) of Regulation (EU) 2016/679 – Binding decision of the European Data Protection Board – Complainant’s request for access to the file prepared for the purposes of the binding decision – Refusal to grant access – Google LLC v CNIL Order of the General Court (Fourth Chamber, Extended Composition) of 7 December 2022.#WhatsApp Ireland Ltd v European Data Protection Board.#Action for annulment – Protection of personal data – Draft decision of the lead supervisory authority – Resolution of disputes between supervisory authorities by the European Data Protection Board – Binding decision – Article 60(4) and Article 65(1)(a) of Regulation (EU) 2016/679 – Act not open to challenge – Preparatory act – Lack of individual concern.#Ca Judgment of the General Court (Tenth Chamber, Extended Composition) of 29 January 2025 (Extracts).#Data Protection Commission v European Data Protection Board.#Protection of personal data – Article 65(1)(a) of Regulation (EU) 2016/679 – Binding decision instructing a lead supervisory authority to broaden the scope of its investigation and issue a new draft decision – Competence of the European Data Protection Board.#Joined Cases T-70/23, T-84/23 and T-111/23. Judgment of the Court (Grand Chamber) of 15 June 2021.#Facebook Ireland Ltd and Others v Gegevensbeschermingsautoriteit.#Request for a preliminary ruling from the Hof van beroep te Brussel.#Reference for a preliminary ruling – Protection of natural persons with regard to the processing of personal data – Charter of Fundamental Rights of the European Union – Articles 7, 8 and 47 – Regulation (EU) 2016/679 – Cross-border processing of personal data – ‘One-stop shop’ mechanism – Sincere and effecti Judgment of the Court (Grand Chamber) of 10 February 2026.#WhatsApp Ireland Ltd v European Data Protection Board.#Appeal – Protection of natural persons with regard to the processing of personal data – Regulation (EU) 2016/679 – Article 63 – Consistency mechanism – Article 65 – Dispute resolution by the European Data Protection Board – Binding decision – Action for annulment – First paragraph of Article 263 TFEU – Act open to challenge – Fourth paragraph of Article 263 TFEU – Condition that the ¶6 Judgment of the General Court (Tenth Chamber, Extended Composition) of 29 January 2025 (Extracts).#Data Protection Commission v European Data Protection Board.#Protection of personal data – Article 65(1)(a) of Regulation (EU) 2016/679 – Binding decision instructing a lead supervisory authority to broaden the scope of its investigation and issue a new draft decision – Competence of the European Data Protection Board.#Joined Cases T-70/23, T-84/23 and T-111/23. +14 more
Guidance 46
EDPB Annual Report 2022 Guidelines 03/2021 on the application of Article 65(1)(a) GDPR Guidelines 06/2022 on the practical implementation of amicable settlements Guidelines 02/2022 on the application of Article 60 GDPR EDPB-EDPS Joint Opinion 01/2023 on the Proposal for a Regulation of the European Parliament and of the Council laying down additional procedural rules relating to the enforcement of Regulation (EU) 2016/679 Guidelines 09/2020 on relevant and reasoned objection under Regulation 2016/679 ¶173 Guidelines 02/2022 on the application of Article 60 GDPR ¶172 Guidelines 02/2022 on the application of Article 60 GDPR +38 more
Literature 1
If it ain’t broke, don’t fix it? Ten improvements for the upcoming tenth anniversary of the General Data Protection Regulation
60(5) 14 Case Law 21 Guidance 1 Literature .md
Case Law 14
Judgment of the Court (Grand Chamber) of 15 June 2021.#Facebook Ireland Ltd and Others v Gegevensbeschermingsautoriteit.#Request for a preliminary ruling from the Hof van beroep te Brussel.#Reference for a preliminary ruling – Protection of natural persons with regard to the processing of personal data – Charter of Fundamental Rights of the European Union – Articles 7, 8 and 47 – Regulation (EU) 2016/679 – Cross-border processing of personal data – ‘One-stop shop’ mechanism – Sincere and effecti Judgment of the General Court (Tenth Chamber, Extended Composition) of 29 January 2025 (Extracts).#Data Protection Commission v European Data Protection Board.#Protection of personal data – Article 65(1)(a) of Regulation (EU) 2016/679 – Binding decision instructing a lead supervisory authority to broaden the scope of its investigation and issue a new draft decision – Competence of the European Data Protection Board.#Joined Cases T-70/23, T-84/23 and T-111/23. ¶16 Judgment of the Court (Fourth Chamber) of 29 January 2026.#Steiermärkische Bank und Sparkassen AG and Others v Österreichische Finanzmarktaufsichtsbehörde (FMA).#Request for a preliminary ruling from the Bundesverwaltungsgericht.#Reference for a preliminary ruling – Prevention of the use of the financial system for the purposes of money laundering or terrorist financing – Directive (EU) 2015/849 – Penalties – Article 58 – Liability of legal persons – Article 59 – Attribution to a legal person of ¶23 Judgment of the Court (Fourth Chamber) of 29 January 2026.#Steiermärkische Bank und Sparkassen AG and Others v Österreichische Finanzmarktaufsichtsbehörde (FMA).#Request for a preliminary ruling from the Bundesverwaltungsgericht.#Reference for a preliminary ruling – Prevention of the use of the financial system for the purposes of money laundering or terrorist financing – Directive (EU) 2015/849 – Penalties – Article 58 – Liability of legal persons – Article 59 – Attribution to a legal person of ¶20 Judgment of the Court (Fourth Chamber) of 29 January 2026.#Steiermärkische Bank und Sparkassen AG and Others v Österreichische Finanzmarktaufsichtsbehörde (FMA).#Request for a preliminary ruling from the Bundesverwaltungsgericht.#Reference for a preliminary ruling – Prevention of the use of the financial system for the purposes of money laundering or terrorist financing – Directive (EU) 2015/849 – Penalties – Article 58 – Liability of legal persons – Article 59 – Attribution to a legal person of ¶1 Judgment of the Court (Fourth Chamber) of 29 January 2026.#Steiermärkische Bank und Sparkassen AG and Others v Österreichische Finanzmarktaufsichtsbehörde (FMA).#Request for a preliminary ruling from the Bundesverwaltungsgericht.#Reference for a preliminary ruling – Prevention of the use of the financial system for the purposes of money laundering or terrorist financing – Directive (EU) 2015/849 – Penalties – Article 58 – Liability of legal persons – Article 59 – Attribution to a legal person of ¶55 Judgment of the Court (Grand Chamber) of 15 June 2021.#Facebook Ireland Ltd and Others v Gegevensbeschermingsautoriteit.#Request for a preliminary ruling from the Hof van beroep te Brussel.#Reference for a preliminary ruling – Protection of natural persons with regard to the processing of personal data – Charter of Fundamental Rights of the European Union – Articles 7, 8 and 47 – Regulation (EU) 2016/679 – Cross-border processing of personal data – ‘One-stop shop’ mechanism – Sincere and effecti ¶31 Judgment of the Court (Fourth Chamber) of 29 January 2026.#Steiermärkische Bank und Sparkassen AG and Others v Österreichische Finanzmarktaufsichtsbehörde (FMA).#Request for a preliminary ruling from the Bundesverwaltungsgericht.#Reference for a preliminary ruling – Prevention of the use of the financial system for the purposes of money laundering or terrorist financing – Directive (EU) 2015/849 – Penalties – Article 58 – Liability of legal persons – Article 59 – Attribution to a legal person of +6 more
Guidance 21
EDPB-EDPS Joint Opinion 01/2023 on the Proposal for a Regulation of the European Parliament and of the Council laying down additional procedural rules relating to the enforcement of Regulation (EU) 2016/679 Guidelines 03/2021 on the application of Article 65(1)(a) GDPR Guidelines 02/2022 on the application of Article 60 GDPR ¶176 Guidelines 02/2022 on the application of Article 60 GDPR ¶169 Guidelines 02/2022 on the application of Article 60 GDPR ¶154 Guidelines 02/2022 on the application of Article 60 GDPR ¶155 Guidelines 02/2022 on the application of Article 60 GDPR ¶156 Guidelines 02/2022 on the application of Article 60 GDPR +13 more
Literature 1
If it ain’t broke, don’t fix it? Ten improvements for the upcoming tenth anniversary of the General Data Protection Regulation
60(6) 2 Case Law 24 Guidance .md
Case Law 2
Judgment of the General Court (Tenth Chamber, Extended Composition) of 29 January 2025 (Extracts).#Data Protection Commission v European Data Protection Board.#Protection of personal data – Article 65(1)(a) of Regulation (EU) 2016/679 – Binding decision instructing a lead supervisory authority to broaden the scope of its investigation and issue a new draft decision – Competence of the European Data Protection Board.#Joined Cases T-70/23, T-84/23 and T-111/23. ¶45 Judgment of the General Court (Tenth Chamber, Extended Composition) of 29 January 2025 (Extracts).#Data Protection Commission v European Data Protection Board.#Protection of personal data – Article 65(1)(a) of Regulation (EU) 2016/679 – Binding decision instructing a lead supervisory authority to broaden the scope of its investigation and issue a new draft decision – Competence of the European Data Protection Board.#Joined Cases T-70/23, T-84/23 and T-111/23.
Guidance 24
EDPB Article 97 GDPR application report: GDPR successful but improvements needed Guidelines 06/2022 on the practical implementation of amicable settlements Guidelines 02/2022 on the application of Article 60 GDPR Statement 4/2024 on the recent legislative developments on the Draft Regulation laying down additional procedural rules for the enforcement of the GDPR Contribution of the EDPB to the evaluation of the GDPR under Article 97 ¶193 Guidelines 02/2022 on the application of Article 60 GDPR ¶197 Guidelines 02/2022 on the application of Article 60 GDPR ¶41 Guidelines 06/2022 on the practical implementation of amicable settlements +16 more
60(7) 8 Case Law 23 Guidance 1 Literature .md
Case Law 8
Judgment of the Court (Grand Chamber) of 15 June 2021.#Facebook Ireland Ltd and Others v Gegevensbeschermingsautoriteit.#Request for a preliminary ruling from the Hof van beroep te Brussel.#Reference for a preliminary ruling – Protection of natural persons with regard to the processing of personal data – Charter of Fundamental Rights of the European Union – Articles 7, 8 and 47 – Regulation (EU) 2016/679 – Cross-border processing of personal data – ‘One-stop shop’ mechanism – Sincere and effecti Judgment of the Court (Grand Chamber) of 10 February 2026.#WhatsApp Ireland Ltd v European Data Protection Board.#Appeal – Protection of natural persons with regard to the processing of personal data – Regulation (EU) 2016/679 – Article 63 – Consistency mechanism – Article 65 – Dispute resolution by the European Data Protection Board – Binding decision – Action for annulment – First paragraph of Article 263 TFEU – Act open to challenge – Fourth paragraph of Article 263 TFEU – Condition that the Judgment of the General Court (Tenth Chamber, Extended Composition) of 16 July 2025.#Lisa Ballmann v European Data Protection Board.#Protection of personal data – Complaint against the controller of personal data of users of an online social network in the European Union – Article 65(1)(a) of Regulation (EU) 2016/679 – Binding decision of the European Data Protection Board – Complainant’s request for access to the file prepared for the purposes of the binding decision – Refusal to grant access – Judgment of the General Court (Tenth Chamber, Extended Composition) of 29 January 2025 (Extracts).#Data Protection Commission v European Data Protection Board.#Protection of personal data – Article 65(1)(a) of Regulation (EU) 2016/679 – Binding decision instructing a lead supervisory authority to broaden the scope of its investigation and issue a new draft decision – Competence of the European Data Protection Board.#Joined Cases T-70/23, T-84/23 and T-111/23. ¶14 Judgment of the Court (Grand Chamber) of 10 February 2026.#WhatsApp Ireland Ltd v European Data Protection Board.#Appeal – Protection of natural persons with regard to the processing of personal data – Regulation (EU) 2016/679 – Article 63 – Consistency mechanism – Article 65 – Dispute resolution by the European Data Protection Board – Binding decision – Action for annulment – First paragraph of Article 263 TFEU – Act open to challenge – Fourth paragraph of Article 263 TFEU – Condition that the ¶10 Judgment of the General Court (Tenth Chamber, Extended Composition) of 16 July 2025.#Lisa Ballmann v European Data Protection Board.#Protection of personal data – Complaint against the controller of personal data of users of an online social network in the European Union – Article 65(1)(a) of Regulation (EU) 2016/679 – Binding decision of the European Data Protection Board – Complainant’s request for access to the file prepared for the purposes of the binding decision – Refusal to grant access – ¶56 Judgment of the Court (Grand Chamber) of 15 June 2021.#Facebook Ireland Ltd and Others v Gegevensbeschermingsautoriteit.#Request for a preliminary ruling from the Hof van beroep te Brussel.#Reference for a preliminary ruling – Protection of natural persons with regard to the processing of personal data – Charter of Fundamental Rights of the European Union – Articles 7, 8 and 47 – Regulation (EU) 2016/679 – Cross-border processing of personal data – ‘One-stop shop’ mechanism – Sincere and effecti ¶33 Judgment of the General Court (Tenth Chamber, Extended Composition) of 29 January 2025 (Extracts).#Data Protection Commission v European Data Protection Board.#Protection of personal data – Article 65(1)(a) of Regulation (EU) 2016/679 – Binding decision instructing a lead supervisory authority to broaden the scope of its investigation and issue a new draft decision – Competence of the European Data Protection Board.#Joined Cases T-70/23, T-84/23 and T-111/23.
Guidance 23
Guidelines 02/2022 on the application of Article 60 GDPR EDPB Annual Report 2022 Guidelines 06/2022 on the practical implementation of amicable settlements Guidelines 03/2021 on the application of Article 65(1)(a) GDPR ¶43 Guidelines 06/2022 on the practical implementation of amicable settlements ¶10 Guidelines 02/2022 on the application of Article 60 GDPR ¶191 Guidelines 02/2022 on the application of Article 60 GDPR ¶198 Guidelines 02/2022 on the application of Article 60 GDPR +15 more
Literature 1
If it ain’t broke, don’t fix it? Ten improvements for the upcoming tenth anniversary of the General Data Protection Regulation
60(8) 1 Case Law 19 Guidance .md
Case Law 1
BVwG - W254 2321912-1
Guidance 19
EDPB-EDPS Joint Opinion 01/2023 on the Proposal for a Regulation of the European Parliament and of the Council laying down additional procedural rules relating to the enforcement of Regulation (EU) 2016/679 Guidelines 02/2022 on the application of Article 60 GDPR Guidelines 03/2021 on the application of Article 65(1)(a) GDPR ¶219 Guidelines 02/2022 on the application of Article 60 GDPR ¶235 Guidelines 02/2022 on the application of Article 60 GDPR ¶226 Guidelines 02/2022 on the application of Article 60 GDPR ¶218 Guidelines 02/2022 on the application of Article 60 GDPR ¶223 Guidelines 02/2022 on the application of Article 60 GDPR +11 more
60(9) 12 Guidance .md
Guidance 12
Guidelines 02/2022 on the application of Article 60 GDPR Guidelines 03/2021 on the application of Article 65(1)(a) GDPR EDPB-EDPS Joint Opinion 01/2023 on the Proposal for a Regulation of the European Parliament and of the Council laying down additional procedural rules relating to the enforcement of Regulation (EU) 2016/679 Guidelines 06/2022 on the practical implementation of amicable settlements ¶223 Guidelines 02/2022 on the application of Article 60 GDPR ¶191 Guidelines 02/2022 on the application of Article 60 GDPR ¶240 Guidelines 02/2022 on the application of Article 60 GDPR ¶43 Guidelines 06/2022 on the practical implementation of amicable settlements +4 more
60(10) 12 Guidance .md
Guidance 12
EDPB Annual Report 2022 Guidelines 02/2022 on the application of Article 60 GDPR ¶249 Guidelines 02/2022 on the application of Article 60 GDPR ¶265 Guidelines 02/2022 on the application of Article 60 GDPR ¶69 Guidelines 02/2022 on the application of Article 60 GDPR ¶246 Guidelines 02/2022 on the application of Article 60 GDPR ¶3 Guidelines 02/2022 on the application of Article 60 GDPR ¶248 Guidelines 02/2022 on the application of Article 60 GDPR +4 more
60(11) 13 Guidance .md
Guidance 13
Guidelines 02/2022 on the application of Article 60 GDPR ¶253 Guidelines 02/2022 on the application of Article 60 GDPR ¶256 Guidelines 02/2022 on the application of Article 60 GDPR ¶251 Guidelines 02/2022 on the application of Article 60 GDPR ¶258 Guidelines 02/2022 on the application of Article 60 GDPR ¶260 Guidelines 02/2022 on the application of Article 60 GDPR ¶265 Guidelines 02/2022 on the application of Article 60 GDPR ¶4 Guidelines 02/2022 on the application of Article 60 GDPR +5 more
60(12) 5 Guidance .md
Guidance 5
Guidelines 02/2022 on the application of Article 60 GDPR ¶265 Guidelines 02/2022 on the application of Article 60 GDPR ¶144 Guidelines 02/2022 on the application of Article 60 GDPR ¶103 Guidelines 02/2022 on the application of Article 60 GDPR ¶7 Guidelines 02/2022 on the application of Article 60 GDPR

Related across sources

News UODO (Poland) - DKE.561.1.2026 Enforcement AEPD (Spain) - PS/00249/2025 Enforcement Slovenian DPA fines controller €1,282 for missing Art. 28(3) processor contract Enforcement ANSPDCP (Romania) - Fine against Homelux SRL Enforcement ANSPDCP (Romania) - Fine against Orange Romania SA of July 17, 2026 Case Law Council of State upholds €600,000 DPA fine against Enschede for Wi-Fi tracking