thinQmaster Virtual testing partner Adaptive practice exams that find your weak spots and drill them. Every answer explained. From $69
Enroll

thinQmaster

Find your exam

Five questions free, before you decide.

Step 1 · choose a vendor

In one of our camps? Your practice exams come with the tuition — they are on your study page already.

Governance, Risk, Audit & Privacy · Advanced

Lead Supervisory Authority

Supervisory authority of a controller's or processor's main establishment that leads cross-border GDPR enforcement under the one-stop-shop mechanism.

Definition

The one-stop-shop lets organizations with establishments in multiple member states deal primarily with one lead authority, which cooperates with concerned authorities. Disputes go to the EDPB for binding decisions. Organizations without an EU establishment cannot use the one-stop-shop and must appoint an EU representative under Article 27.

Example

A company with its EU headquarters in Amsterdam has the Dutch DPA as its lead authority.

Exam tip

Non-EU organizations without an establishment need an Article 27 representative, not a lead authority.

Related terms