The Court of Justice of the European Union rendered a decision allowing EU data protection authorities to forego the EU General Data Protection Regulation's "one-stop shop" enforcement mechanism in exceptional cases. The court ruled a non-lead supervisory authority can bring forth cases if the GDPR confers DPA competency, but the authority's power "must be exercised with due regard to the cooperation and consistency procedures." The decision, which stems from a case between Belgium's Data Protection Authority and Facebook, falls in line with a prior CJEU advocate general opinion on the matter.
Full Story