Guidelines 02/2022 on the application of Article 60 GDPR

What it covers

These guidelines analyse the cooperation procedure between the lead supervisory authority and concerned supervisory authorities under Article 60 GDPR, clarifying its application paragraph by paragraph. They cover the exchange of relevant information, submission and revision of draft decisions, relevant and reasoned objections, and the interaction with the Article 66 urgency procedure.

Why it matters

It is the primary EDPB reference for understanding how the one-stop-shop cooperation procedure operates in practice among supervisory authorities handling cross-border cases.

Refer to it when

• researching how the one-stop-shop mechanism functions
• determining obligations of a lead supervisory authority
• assessing the effect of an objection to a draft decision
• understanding when the urgency procedure interacts with Article 60

Questions this document addresses

• What information must be exchanged between the lead and concerned supervisory authorities?
• What constitutes a relevant and reasoned objection under Article 60(4)?
• Which authority adopts and notifies the final national decision?
• How does Article 66 interact with an ongoing Article 60 cooperation procedure?

Topics

• Supervisory authorities
• Enforcement
• Controller & processor