CINXE.COM

<!DOCTYPE html><html lang=en-US class="no-js no-svg"><head><meta charset=UTF-8><meta name=viewport content="width=device-width, initial-scale=1.0"><link rel=profile href=http://gmpg.org/xfn/11><link type=text/css media=all href=https://gdpr.eu/wp-content/cache/autoptimize/css/autoptimize_88073fbb10b912e714cec31503f2ec90.css rel=stylesheet><title>Recital 127 - Information of the supervisory authority regarding local processing - GDPR.eu</title> <script>(function(d, s, id){ var js, fjs = d.getElementsByTagName(s)[0]; if (d.getElementById(id)) {return;} js = d.createElement(s); js.id = id; js.src = "//connect.facebook.net/en_US/sdk.js#xfbml=1&version=v2.6"; fjs.parentNode.insertBefore(js, fjs); }(document, 'script', 'facebook-jssdk'));</script> <meta name=robots content="max-snippet:-1, max-image-preview:large, max-video-preview:-1"><link rel=canonical href=https://gdpr.eu/recital-127-information-of-the-supervisory-authority-regarding-local-processing/ ><meta property=og:locale content=en_US><meta property=og:type content=article><meta property=og:title content="Recital 127 - Information of the supervisory authority regarding local processing - GDPR.eu"><meta property=og:description content="Recital 127 Information of the supervisory authority regarding local processing Each supervisory authority not acting as the lead supervisory authority should be competent to handle local cases where the..."><meta property=og:url content=https://gdpr.eu/recital-127-information-of-the-supervisory-authority-regarding-local-processing/ ><meta property=og:site_name content=GDPR.eu><meta property=article:tag content=Recitals><meta property=article:section content=Uncategorized><meta property=article:published_time content=2018-11-14T01:23:52+00:00><meta property=article:modified_time content=2023-09-14T15:43:31+00:00><meta property=og:updated_time content=2023-09-14T15:43:31+00:00><meta name=twitter:card content=summary_large_image><meta name=twitter:description content="Recital 127 Information of the supervisory authority regarding local processing Each supervisory authority not acting as the lead supervisory authority should be competent to handle local cases where the..."><meta name=twitter:title content="Recital 127 - Information of the supervisory authority regarding local processing - GDPR.eu"> <script type=application/ld+json class='yoast-schema-graph yoast-schema-graph--main'>{"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://gdpr.eu/#organization","name":"GDPR.eu","url":"https://gdpr.eu/","sameAs":[],"logo":{"@type":"ImageObject","@id":"https://gdpr.eu/#logo","url":"https://gdpr.eu/wp-content/uploads/2019/02/profile-pic-PH-gdpr.jpg","width":900,"height":900,"caption":"GDPR.eu"},"image":{"@id":"https://gdpr.eu/#logo"}},{"@type":"WebSite","@id":"https://gdpr.eu/#website","url":"https://gdpr.eu/","name":"GDPR.eu","publisher":{"@id":"https://gdpr.eu/#organization"},"potentialAction":{"@type":"SearchAction","target":"https://gdpr.eu/?s={search_term_string}","query-input":"required name=search_term_string"}},{"@type":"WebPage","@id":"https://gdpr.eu/recital-127-information-of-the-supervisory-authority-regarding-local-processing/#webpage","url":"https://gdpr.eu/recital-127-information-of-the-supervisory-authority-regarding-local-processing/","inLanguage":"en-US","name":"Recital 127 - Information of the supervisory authority regarding local processing - GDPR.eu","isPartOf":{"@id":"https://gdpr.eu/#website"},"datePublished":"2018-11-14T01:23:52+00:00","dateModified":"2023-09-14T15:43:31+00:00"},{"@type":"Article","@id":"https://gdpr.eu/recital-127-information-of-the-supervisory-authority-regarding-local-processing/#article","isPartOf":{"@id":"https://gdpr.eu/recital-127-information-of-the-supervisory-authority-regarding-local-processing/#webpage"},"author":{"@id":"https://gdpr.eu/#/schema/person/ea6a6cfb7b5ad33e0b774ac2085eb166"},"headline":"Recital 127 – Information of the supervisory authority regarding local processing","datePublished":"2018-11-14T01:23:52+00:00","dateModified":"2023-09-14T15:43:31+00:00","commentCount":0,"mainEntityOfPage":{"@id":"https://gdpr.eu/recital-127-information-of-the-supervisory-authority-regarding-local-processing/#webpage"},"publisher":{"@id":"https://gdpr.eu/#organization"},"keywords":"Recitals","articleSection":""},{"@type":["Person"],"@id":"https://gdpr.eu/#/schema/person/ea6a6cfb7b5ad33e0b774ac2085eb166","name":"Ben Wolford","image":{"@type":"ImageObject","@id":"https://gdpr.eu/#authorlogo","url":"https://secure.gravatar.com/avatar/41724bffc3c429bc44aff458c88401e5?s=96&d=mm&r=g","caption":"Ben Wolford"},"description":"A journalist by training, Ben has reported and covered stories around the world. He joined <a href=\"https://proton.me?ref=gdpreu\">Proton</a> to help lead the fight for data privacy.","sameAs":[]}]}</script> <link rel=dns-prefetch href=//ws.sharethis.com><link rel=dns-prefetch href=//cdn.jsdelivr.net><link rel=dns-prefetch href=//maxcdn.bootstrapcdn.com><link rel=dns-prefetch href=//fonts.googleapis.com><link rel=dns-prefetch href=//use.fontawesome.com><link rel=dns-prefetch href=//s.w.org><link rel=alternate type=application/rss+xml title="GDPR.eu » Feed" href=https://gdpr.eu/feed/ ><link rel=alternate type=application/rss+xml title="GDPR.eu » Comments Feed" href=https://gdpr.eu/comments/feed/ ><link rel=alternate type=application/rss+xml title="GDPR.eu » Recital 127 – Information of the supervisory authority regarding local processing Comments Feed" href=https://gdpr.eu/recital-127-information-of-the-supervisory-authority-regarding-local-processing/feed/ > <script>window._wpemojiSettings = {"baseUrl":"https:\/\/s.w.org\/images\/core\/emoji\/12.0.0-1\/72x72\/","ext":".png","svgUrl":"https:\/\/s.w.org\/images\/core\/emoji\/12.0.0-1\/svg\/","svgExt":".svg","source":{"concatemoji":"https:\/\/gdpr.eu\/wp-includes\/js\/wp-emoji-release.min.js?ver=8c03ada028d9ba4936249699216631ae"}}; !function(e,a,t){var n,r,o,i=a.createElement("canvas"),p=i.getContext&&i.getContext("2d");function s(e,t){var a=String.fromCharCode;p.clearRect(0,0,i.width,i.height),p.fillText(a.apply(this,e),0,0);e=i.toDataURL();return p.clearRect(0,0,i.width,i.height),p.fillText(a.apply(this,t),0,0),e===i.toDataURL()}function c(e){var t=a.createElement("script");t.src=e,t.defer=t.type="text/javascript",a.getElementsByTagName("head")[0].appendChild(t)}for(o=Array("flag","emoji"),t.supports={everything:!0,everythingExceptFlag:!0},r=0;r<o.length;r++)t.supports[o[r]]=function(e){if(!p||!p.fillText)return!1;switch(p.textBaseline="top",p.font="600 32px Arial",e){case"flag":return s([127987,65039,8205,9895,65039],[127987,65039,8203,9895,65039])?!1:!s([55356,56826,55356,56819],[55356,56826,8203,55356,56819])&&!s([55356,57332,56128,56423,56128,56418,56128,56421,56128,56430,56128,56423,56128,56447],[55356,57332,8203,56128,56423,8203,56128,56418,8203,56128,56421,8203,56128,56430,8203,56128,56423,8203,56128,56447]);case"emoji":return!s([55357,56424,55356,57342,8205,55358,56605,8205,55357,56424,55356,57340],[55357,56424,55356,57342,8203,55358,56605,8203,55357,56424,55356,57340])}return!1}(o[r]),t.supports.everything=t.supports.everything&&t.supports[o[r]],"flag"!==o[r]&&(t.supports.everythingExceptFlag=t.supports.everythingExceptFlag&&t.supports[o[r]]);t.supports.everythingExceptFlag=t.supports.everythingExceptFlag&&!t.supports.flag,t.DOMReady=!1,t.readyCallback=function(){t.DOMReady=!0},t.supports.everything||(n=function(){t.readyCallback()},a.addEventListener?(a.addEventListener("DOMContentLoaded",n,!1),e.addEventListener("load",n,!1)):(e.attachEvent("onload",n),a.attachEvent("onreadystatechange",function(){"complete"===a.readyState&&t.readyCallback()})),(n=t.source||{}).concatemoji?c(n.concatemoji):n.wpemoji&&n.twemoji&&(c(n.twemoji),c(n.wpemoji)))}(window,document,window._wpemojiSettings);</script> <style>img.wp-smiley, img.emoji { display: inline !important; border: none !important; box-shadow: none !important; height: 1em !important; width: 1em !important; margin: 0 .07em !important; vertical-align: -0.1em !important; background: none !important; padding: 0 !important; }</style><link rel=stylesheet id=simple-share-buttons-adder-font-awesome-css href='//maxcdn.bootstrapcdn.com/font-awesome/4.3.0/css/font-awesome.min.css?ver=8c03ada028d9ba4936249699216631ae' type=text/css media=all><link rel=stylesheet id=opensans-css href='https://fonts.googleapis.com/css?family=Open+Sans' type=text/css media=all><link rel=stylesheet id=font-awesome-css href=https://use.fontawesome.com/releases/v5.1.1/css/all.css type=text/css media=all> <script src="https://gdpr.eu/wp-content/cache/minify/c7035.js"></script> <script id=st_insights_js src='https://ws.sharethis.com/button/st_insights.js?publisher=4d48b7c5-0ae3-43d4-bfbe-3ff8c17a8ae6&product=simpleshare'></script> <link rel=https://api.w.org/ href=https://gdpr.eu/wp-json/ ><link rel=EditURI type=application/rsd+xml title=RSD href=https://gdpr.eu/xmlrpc.php?rsd><link rel=wlwmanifest type=application/wlwmanifest+xml href=https://gdpr.eu/wp-includes/wlwmanifest.xml><link rel=shortlink href='https://gdpr.eu/?p=6266'><link rel=alternate type=application/json+oembed href="https://gdpr.eu/wp-json/oembed/1.0/embed?url=https%3A%2F%2Fgdpr.eu%2Frecital-127-information-of-the-supervisory-authority-regarding-local-processing%2F"><link rel=alternate type=text/xml+oembed href="https://gdpr.eu/wp-json/oembed/1.0/embed?url=https%3A%2F%2Fgdpr.eu%2Frecital-127-information-of-the-supervisory-authority-regarding-local-processing%2F&format=xml"><link rel="shortcut icon" href=https://gdpr.eu/wp-content/themes/gdpr/assets/favicon.ico><link rel=apple-touch-icon sizes=57x57 href=https://gdpr.eu/wp-content/themes/gdpr/assets/apple-icon-57x57.png><link rel=apple-touch-icon sizes=60x60 href=https://gdpr.eu/wp-content/themes/gdpr/assets/apple-icon-60x60.png><link rel=apple-touch-icon sizes=72x72 href=https://gdpr.eu/wp-content/themes/gdpr/assets/apple-icon-72x72.png><link rel=apple-touch-icon sizes=76x76 href=https://gdpr.eu/wp-content/themes/gdpr/assets/apple-icon-76x76.png><link rel=apple-touch-icon sizes=114x114 href=https://gdpr.eu/wp-content/themes/gdpr/assets/apple-icon-114x114.png><link rel=apple-touch-icon sizes=120x120 href=https://gdpr.eu/wp-content/themes/gdpr/assets/apple-icon-120x120.png><link rel=apple-touch-icon sizes=144x144 href=https://gdpr.eu/wp-content/themes/gdpr/assets/apple-icon-144x144.png><link rel=apple-touch-icon sizes=152x152 href=https://gdpr.eu/wp-content/themes/gdpr/assets/apple-icon-152x152.png><link rel=apple-touch-icon sizes=180x180 href=https://gdpr.eu/wp-content/themes/gdpr/assets/apple-icon-180x180.png><link rel=icon type=image/png sizes=192x192 href=https://gdpr.eu/wp-content/themes/gdpr/assets/android-icon-192x192.png><link rel=icon type=image/png sizes=32x32 href=https://gdpr.eu/wp-content/themes/gdpr/assets/favicon-32x32.png><link rel=icon type=image/png sizes=96x96 href=https://gdpr.eu/wp-content/themes/gdpr/assets/favicon-96x96.png><link rel=icon type=image/png sizes=16x16 href=https://gdpr.eu/wp-content/themes/gdpr/assets/favicon-16x16.png><link rel=manifest href=https://gdpr.eu/wp-content/themes/gdpr/assets/manifest.json><meta name=msapplication-TileColor content=#ffffff><meta name=msapplication-TileImage content=https://gdpr.eu/wp-content/themes/gdpr/assets/ms-icon-144x144.png><meta name=theme-color content=#ffffff><style>.recentcomments a{display:inline !important;padding:0 !important;margin:0 !important;}</style></head><body class="post-template-default single single-post postid-6266 single-format-standard cookies-not-set"><div id=wrapper><header id=header><div id=social><div class="container text-right"> <a target=_blank href="http://www.facebook.com/sharer.php?u=https://gdpr.eu/"><em class="fab fa-facebook"></em> <span>Facebook</span></a> <a target=_blank href="http://twitter.com/share?url=https://gdpr.eu/"><em class="fab fa-twitter"></em> <span>Twitter</span></a></div></div><div id=top><div class=container><div class=pull-right><div class=search-box><form role=search method=get class=search-form action=https://gdpr.eu/ > <input type=search id=search-form-674b87713a4a6 class=textbox placeholder=Search... value name=s> <button type=submit class=button><i class=icon-search></i><span>Search</span></button></form></div></div> <span id=logo> <a href=https://gdpr.eu/ class=gdpr></a> <a target=_blank href=https://ec.europa.eu/programmes/horizon2020/en/ class=horizon></a> <img class=full src=https://gdpr.eu/wp-content/themes/gdpr/images/logo-gdpr-eu.svg alt=GDPR.eu> <img class=short src=https://gdpr.eu/wp-content/themes/gdpr/images/logo-gdpr-eu-notext.svg alt=GDPR.eu> </span></div></div><nav id=nav><div class=container><div id=searchx><div class=search-box><form role=search method=get class=search-form action=https://gdpr.eu/ > <input type=search id=search-form-674b87713a764 class=textbox placeholder=Search... value name=s> <button type=submit class=button><i class=icon-search></i><span>Search</span></button></form></div></div><nav id=mainmenu class=menu-primary-menu-container><ul><li id=menu-item-309 class="menu-item menu-item-type-post_type menu-item-object-page menu-item-home menu-item-309"><a href=https://gdpr.eu/ >Home</a></li><li id=menu-item-351 class="menu-item menu-item-type-post_type menu-item-object-page menu-item-351"><a href=https://gdpr.eu/checklist/ >Checklist</a></li><li id=menu-item-8150 class="menu-item menu-item-type-post_type menu-item-object-page menu-item-8150"><a href=https://gdpr.eu/faq/ >FAQ</a></li><li id=menu-item-394 class="menu-item menu-item-type-taxonomy menu-item-object-post_tag menu-item-394"><a href=https://gdpr.eu/tag/gdpr/ >GDPR</a></li><li id=menu-item-350 class="menu-item menu-item-type-taxonomy menu-item-object-category menu-item-350"><a href=https://gdpr.eu/category/news-updates/ >News & Updates</a></li></ul></nav></div></nav></header><div id=main><div id=primary class="content-area one-column"><div id=content class=site-content><div id=primary class="content-area one-column"><div class=post-main-box><div class="container section-row"><div class=post-detail-box><div class="container "><h1>Recitals</h1><div class=row><div class="col-lg-4 d-none d-xl-block"><div id=sidebar class=recitals><ul><li data-id=5636><a href=https://gdpr.eu/recital-1-data-protection-as-a-fundamental-right/ >1</a></li><li data-id=5641><a href=https://gdpr.eu/recital-2-respect-of-the-fundamental-rights-and-freedoms/ >2</a></li><li data-id=5646><a href=https://gdpr.eu/recital-3-directive-95-46-ec-harmonisation/ >3</a></li><li data-id=5651><a href=https://gdpr.eu/recital-4-data-protection-in-balance-with-other-fundamental-rights/ >4</a></li><li data-id=5656><a href=https://gdpr.eu/recital-5-cooperation-between-member-states-to-exchange-personal-data/ >5</a></li><li data-id=5661><a href=https://gdpr.eu/recital-6-ensuring-a-high-level-of-data-protection-despite-the-increased-exchange-of-data/ >6</a></li><li data-id=5666><a href=https://gdpr.eu/recital-7-the-framework-is-based-on-control-and-certainty/ >7</a></li><li data-id=5671><a href=https://gdpr.eu/recital-8-adoption-into-national-law/ >8</a></li><li data-id=5676><a href=https://gdpr.eu/recital-9-different-standards-of-protection-by-the-directive-95-46-ec/ >9</a></li><li data-id=5681><a href=https://gdpr.eu/recital-10-harmonised-level-of-data-protection-despite-national-scope/ >10</a></li><li data-id=5686><a href=https://gdpr.eu/recital-11-harmonisation-of-the-powers-and-sanctions/ >11</a></li><li data-id=5691><a href=https://gdpr.eu/recital-12-authorization-of-the-european-parliament-and-the-council/ >12</a></li><li data-id=5696><a href=https://gdpr.eu/recital-13-taking-account-of-micro-small-and-medium-sized-enterprises/ >13</a></li><li data-id=5701><a href=https://gdpr.eu/recital-14-not-applicable-to-legal-persons/ >14</a></li><li data-id=5706><a href=https://gdpr.eu/recital-15-technology-neutrality/ >15</a></li><li data-id=5711><a href=https://gdpr.eu/recital-16-not-applicable-to-activities-regarding-national-and-common-security/ >16</a></li><li data-id=5716><a href=https://gdpr.eu/recital-17-adaptation-of-regulation-ec-no-45-2001/ >17</a></li><li data-id=5721><a href=https://gdpr.eu/recital-18-not-applicable-to-personal-or-household-activities/ >18</a></li><li data-id=5726><a href=https://gdpr.eu/recital-19-not-applicable-to-criminal-prosecution/ >19</a></li><li data-id=5731><a href=https://gdpr.eu/recital-20-respecting-the-independence-of-the-judiciary/ >20</a></li><li data-id=5736><a href=https://gdpr.eu/recital-21-liability-rules-of-intermediary-service-providers-shall-remain-unaffected/ >21</a></li><li data-id=5741><a href=https://gdpr.eu/recital-22-processing-by-an-establishment/ >22</a></li><li data-id=5746><a href=https://gdpr.eu/recital-23-applicable-to-processors-not-established-in-the-union-if-data-subjects-within-the-union-are-targeted/ >23</a></li><li data-id=5751><a href=https://gdpr.eu/recital-24-applicable-to-processors-not-established-in-the-union-if-data-subjects-within-the-union-are-profiled/ >24</a></li><li data-id=5756><a href=https://gdpr.eu/recital-25-applicable-to-processors-due-to-international-law/ >25</a></li><li data-id=5761><a href=https://gdpr.eu/recital-26-not-applicable-to-anonymous-data/ >26</a></li><li data-id=5766><a href=https://gdpr.eu/recital-27-not-applicable-to-data-of-deceased-persons/ >27</a></li><li data-id=5771><a href=https://gdpr.eu/recital-28-introduction-of-pseudonymisation/ >28</a></li><li data-id=5776><a href=https://gdpr.eu/recital-29-pseudonymisation-at-the-same-controller/ >29</a></li><li data-id=5781><a href=https://gdpr.eu/recital-30-online-identifiers-for-profiling-and-identification/ >30</a></li><li data-id=5786><a href=https://gdpr.eu/recital-31-not-applicable-to-public-authorities-in-connection-with-their-official-tasks/ >31</a></li><li data-id=5791><a href=https://gdpr.eu/recital-32-conditions-for-consent/ >32</a></li><li data-id=5796><a href=https://gdpr.eu/recital-33-consent-to-certain-areas-of-scientific-research/ >33</a></li><li data-id=5801><a href=https://gdpr.eu/recital-34-genetic-data/ >34</a></li><li data-id=5806><a href=https://gdpr.eu/recital-35-health-data/ >35</a></li><li data-id=5811><a href=https://gdpr.eu/recital-36-determination-of-the-main-establishment/ >36</a></li><li data-id=5816><a href=https://gdpr.eu/recital-37-enterprise-group/ >37</a></li><li data-id=5821><a href=https://gdpr.eu/recital-38-special-protection-of-childrens-personal-data/ >38</a></li><li data-id=5826><a href=https://gdpr.eu/recital-39-principles-of-data-processing/ >39</a></li><li data-id=5831><a href=https://gdpr.eu/recital-40-lawfulness-of-data-processing/ >40</a></li><li data-id=5836><a href=https://gdpr.eu/recital-41-legal-basis-or-legislative-measures/ >41</a></li><li data-id=5891><a href=https://gdpr.eu/recital-52-exceptions-to-the-prohibition-on-processing-special-categories-of-personal-data/ >42</a></li><li data-id=5896><a href=https://gdpr.eu/recital-53-processing-of-sensitive-data-in-health-and-social-sector/ >43</a></li><li data-id=5901><a href=https://gdpr.eu/recital-54-processing-of-sensitive-data-in-public-health-sector/ >44</a></li><li data-id=5906><a href=https://gdpr.eu/recital-55-public-interest-in-processing-by-official-authorities-for-objectives-of-recognized-religious-communities/ >45</a></li><li data-id=5911><a href=https://gdpr.eu/recital-56-processing-personal-data-on-peoples-political-opinions-by-parties/ >46</a></li><li data-id=5916><a href=https://gdpr.eu/recital-57-additional-data-for-identification-purposes/ >47</a></li><li data-id=5921><a href=https://gdpr.eu/recital-58-the-principle-of-transparency/ >48</a></li><li data-id=5926><a href=https://gdpr.eu/recital-59-procedures-for-the-exercise-of-the-rights-of-the-data-subjects/ >49</a></li><li data-id=5931><a href=https://gdpr.eu/recital-60-information-obligation/ >50</a></li><li data-id=5936><a href=https://gdpr.eu/recital-61-time-of-information/ >51</a></li><li data-id=5841><a href=https://gdpr.eu/recital-42-burden-of-proof-and-requirements-for-consent/ >52</a></li><li data-id=5846><a href=https://gdpr.eu/recital-43-freely-given-consent/ >53</a></li><li data-id=5851><a href=https://gdpr.eu/recital-44-performance-of-a-contract/ >54</a></li><li data-id=5856><a href=https://gdpr.eu/recital-45-fulfillment-of-legal-obligations/ >55</a></li><li data-id=5861><a href=https://gdpr.eu/recital-46-vital-interests-of-the-data-subject/ >56</a></li><li data-id=5866><a href=https://gdpr.eu/recital-47-overriding-legitimate-interest/ >57</a></li><li data-id=5871><a href=https://gdpr.eu/recital-48-overriding-legitimate-interest-within-group-of-undertakings/ >58</a></li><li data-id=5876><a href=https://gdpr.eu/recital-49-network-and-information-security-as-overriding-legitimate-interest/ >59</a></li><li data-id=5881><a href=https://gdpr.eu/recital-50-further-processing-of-personal-data/ >60</a></li><li data-id=5886><a href=https://gdpr.eu/recital-51-protecting-sensitive-personal-data/ >61</a></li><li data-id=5941><a href=https://gdpr.eu/recital-62-exceptions-to-the-obligation-to-provide-information/ >62</a></li><li data-id=5946><a href=https://gdpr.eu/recital-63-right-of-access/ >63</a></li><li data-id=5951><a href=https://gdpr.eu/recital-64-identity-verification/ >64</a></li><li data-id=5956><a href=https://gdpr.eu/recital-65-right-of-rectification-and-erasure/ >65</a></li><li data-id=5961><a href=https://gdpr.eu/recital-66-right-to-be-forgotten/ >66</a></li><li data-id=5966><a href=https://gdpr.eu/recital-67-restriction-of-processing/ >67</a></li><li data-id=5971><a href=https://gdpr.eu/recital-68-right-of-data-portability/ >68</a></li><li data-id=5976><a href=https://gdpr.eu/recital-69-right-to-object/ >69</a></li><li data-id=5981><a href=https://gdpr.eu/recital-70-right-to-object-to-direct-marketing/ >70</a></li><li data-id=5986><a href=https://gdpr.eu/recital-71-profiling/ >71</a></li><li data-id=5991><a href=https://gdpr.eu/recital-72-guidance-of-the-european-data-protection-board-regarding-profiling/ >72</a></li><li data-id=5996><a href=https://gdpr.eu/recital-73-restrictions-of-rights-and-principles/ >73</a></li><li data-id=6001><a href=https://gdpr.eu/recital-74-responsibility-and-liability-of-the-controller/ >74</a></li><li data-id=6006><a href=https://gdpr.eu/recital-75-risks-to-the-rights-and-freedoms-of-natural-persons/ >75</a></li><li data-id=6011><a href=https://gdpr.eu/recital-76-risk-assessment/ >76</a></li><li data-id=6016><a href=https://gdpr.eu/recital-77-risk-assessment-guidelines/ >77</a></li><li data-id=6021><a href=https://gdpr.eu/recital-78-appropriate-technical-and-organisational-measures/ >78</a></li><li data-id=6026><a href=https://gdpr.eu/recital-79-allocation-of-the-responsibilities/ >79</a></li><li data-id=6031><a href=https://gdpr.eu/recital-80-designation-of-a-representative/ >80</a></li><li data-id=6036><a href=https://gdpr.eu/recital-81-the-use-of-processors/ >81</a></li><li data-id=6041><a href=https://gdpr.eu/recital-82-record-of-processing-activities/ >82</a></li><li data-id=6046><a href=https://gdpr.eu/recital-83-security-of-processing/ >83</a></li><li data-id=6051><a href=https://gdpr.eu/recital-84-risk-evaluation-and-impact-assessment/ >84</a></li><li data-id=6056><a href=https://gdpr.eu/recital-85-notification-obligation-of-breaches-to-the-supervisory-authority/ >85</a></li><li data-id=6061><a href=https://gdpr.eu/recital-86-notification-of-data-subjects-in-case-of-data-breaches/ >86</a></li><li data-id=6066><a href=https://gdpr.eu/recital-87-promptness-of-reporting-notification/ >87</a></li><li data-id=6071><a href=https://gdpr.eu/recital-88-format-and-procedures-of-the-notification/ >88</a></li><li data-id=6076><a href=https://gdpr.eu/recital-89-elimination-of-the-general-reporting-requirement/ >89</a></li><li data-id=6081><a href=https://gdpr.eu/recital-90-data-protection-impact-assessement/ >90</a></li><li data-id=6086><a href=https://gdpr.eu/recital-91-necessity-of-a-data-protection-impact-assessment/ >91</a></li><li data-id=6091><a href=https://gdpr.eu/recital-92-broader-data-protection-impact-assessment/ >92</a></li><li data-id=6096><a href=https://gdpr.eu/recital-93-data-protection-impact-assessment-at-authorities/ >93</a></li><li data-id=6101><a href=https://gdpr.eu/recital-94-consultation-of-the-supervisory-authority/ >94</a></li><li data-id=6106><a href=https://gdpr.eu/recital-95-support-by-the-processor/ >95</a></li><li data-id=6111><a href=https://gdpr.eu/recital-96-consultation-of-the-supervisory-authority-in-the-course-of-a-legislative-process/ >96</a></li><li data-id=6116><a href=https://gdpr.eu/recital-97-data-protection-officer/ >97</a></li><li data-id=6121><a href=https://gdpr.eu/recital-98-preparation-of-codes-of-conduct-by-organisations-and-associations/ >98</a></li><li data-id=6126><a href=https://gdpr.eu/recital-99-consultation-of-stakeholders-and-data-subjects-in-the-development-of-codes-of-conduct/ >99</a></li><li data-id=6131><a href=https://gdpr.eu/recital-100-certification/ >100</a></li><li data-id=6136><a href=https://gdpr.eu/recital-101-general-principles-for-international-data-transfers/ >101</a></li><li data-id=6146><a href=https://gdpr.eu/recital-103-appropriate-level-of-data-protection-based-on-an-adequacy-decision/ >102</a></li><li data-id=6151><a href=https://gdpr.eu/recital-104-criteria-for-an-adequacy-decision/ >103</a></li><li data-id=6156><a href=https://gdpr.eu/recital-105-consideration-of-international-agreements-for-an-adequacy-decision/ >104</a></li><li data-id=6161><a href=https://gdpr.eu/recital-106-monitoring-and-periodic-review-of-the-level-of-data-protection/ >105</a></li><li data-id=6166><a href=https://gdpr.eu/recital-107-amendment-revocation-and-suspension-of-adequacy-decisions/ >106</a></li><li data-id=6171><a href=https://gdpr.eu/recital-108-appropriate-safeguards/ >107</a></li><li data-id=6176><a href=https://gdpr.eu/recital-109-standard-data-protection-clauses/ >108</a></li><li data-id=6181><a href=https://gdpr.eu/recital-110-binding-corporate-rules/ >109</a></li><li data-id=6186><a href=https://gdpr.eu/recital-111-exceptions-for-certain-cases-of-international-transfers/ >110</a></li><li data-id=6191><a href=https://gdpr.eu/recital-112-data-transfers-due-to-important-reasons-of-public-interest/ >111</a></li><li data-id=6196><a href=https://gdpr.eu/recital-113-transfers-qualified-as-not-repetitive-and-that-only-concern-a-limited-number-of-data-subjects/ >112</a></li><li data-id=6201><a href=https://gdpr.eu/recital-114-safeguarding-of-enforceability-of-rights-and-obligations-in-the-absence-of-an-adequacy-decision/ >113</a></li><li data-id=6206><a href=https://gdpr.eu/recital-115-rules-in-third-countries-contrary-to-the-regulation/ >114</a></li><li data-id=6211><a href=https://gdpr.eu/recital-116-cooperation-among-supervisory-authorities/ >115</a></li><li data-id=6216><a href=https://gdpr.eu/recital-117-establishment-of-supervisory-authorities/ >116</a></li><li data-id=6221><a href=https://gdpr.eu/recital-118-monitoring-of-the-supervisory-authorities/ >117</a></li><li data-id=6226><a href=https://gdpr.eu/recital-119-organisation-of-several-supervisory-authorities-of-a-member-state/ >118</a></li><li data-id=6231><a href=https://gdpr.eu/recital-120-features-of-supervisory-authorities/ >119</a></li><li data-id=6236><a href=https://gdpr.eu/recital-121-independence-of-the-supervisory-authorities/ >120</a></li><li data-id=6141><a href=https://gdpr.eu/recital-102-international-agreements-for-an-appropriate-level-of-data-protection/ >121</a></li><li data-id=6241><a href=https://gdpr.eu/recital-122-responsibility-of-the-supervisory-authorities/ >122</a></li><li data-id=6246><a href=https://gdpr.eu/recital-123-cooperation-of-the-supervisory-authorities-with-each-other-and-with-the-commission/ >123</a></li><li data-id=6251><a href=https://gdpr.eu/recital-124-lead-authority-regarding-processing-in-several-member-states/ >124</a></li><li data-id=6256><a href=https://gdpr.eu/recital-125-competences-of-the-lead-authority/ >125</a></li><li data-id=6261><a href=https://gdpr.eu/recital-126-joint-decisions/ >126</a></li><li data-id=6266><a href=https://gdpr.eu/recital-127-information-of-the-supervisory-authority-regarding-local-processing/ >127</a></li><li data-id=6271><a href=https://gdpr.eu/recital-128-responsibility-regarding-processing-in-the-public-interest/ >128</a></li><li data-id=6276><a href=https://gdpr.eu/recital-129-tasks-and-powers-of-the-supervisory-authorities/ >129</a></li><li data-id=6281><a href=https://gdpr.eu/recital-130-consideration-of-the-authority-with-which-the-complaint-has-been-lodged/ >130</a></li><li data-id=6286><a href=https://gdpr.eu/recital-131-attempt-of-an-amicable-settlement/ >131</a></li><li data-id=6291><a href=https://gdpr.eu/recital-132-awareness-raising-activities-and-specific-measures/ >132</a></li><li data-id=6296><a href=https://gdpr.eu/recital-133-mutual-assistance-and-provisional-measures/ >133</a></li><li data-id=6301><a href=https://gdpr.eu/recital-134-participation-in-joint-operations/ >134</a></li><li data-id=6306><a href=https://gdpr.eu/recital-135-consistency-mechanism/ >135</a></li><li data-id=6311><a href=https://gdpr.eu/recital-136-binding-decisions-and-opinions-of-the-board/ >136</a></li><li data-id=6316><a href=https://gdpr.eu/recital-137-provisional-measures/ >137</a></li><li data-id=6321><a href=https://gdpr.eu/recital-138-urgency-procedure/ >138</a></li><li data-id=6326><a href=https://gdpr.eu/recital-139-european-data-protection-board/ >139</a></li><li data-id=6331><a href=https://gdpr.eu/recital-140-secretariat-and-staff-of-the-board/ >140</a></li><li data-id=6336><a href=https://gdpr.eu/recital-141-right-to-lodge-a-complaint/ >141</a></li><li data-id=6401><a href=https://gdpr.eu/recital-154-principle-of-public-access-to-official-documents/ >142</a></li><li data-id=6406><a href=https://gdpr.eu/recital-155-processing-in-the-employment-context/ >143</a></li><li data-id=6411><a href=https://gdpr.eu/recital-156-processing-for-archiving-scientific-or-historical-research-or-statistical-purposes/ >144</a></li><li data-id=6416><a href=https://gdpr.eu/recital-157-information-from-registries-and-scientific-research/ >145</a></li><li data-id=6421><a href=https://gdpr.eu/recital-158-processing-for-archiving-purposes/ >146</a></li><li data-id=6426><a href=https://gdpr.eu/recital-159-processing-for-scientific-research-purposes/ >147</a></li><li data-id=6431><a href=https://gdpr.eu/recital-160-processing-for-historical-research-purposes/ >148</a></li><li data-id=6436><a href=https://gdpr.eu/recital-161-consenting-to-the-participation-in-clinical-trials/ >149</a></li><li data-id=6341><a href=https://gdpr.eu/recital-142-the-right-of-data-subjects-to-mandate-a-not-for-profit-body-organisation-or-association/ >150</a></li><li data-id=6346><a href=https://gdpr.eu/recital-143-judicial-remedies/ >151</a></li><li data-id=6351><a href=https://gdpr.eu/recital-144-related-proceedings/ >152</a></li><li data-id=6356><a href=https://gdpr.eu/recital-145-choice-of-venue/ >153</a></li><li data-id=6361><a href=https://gdpr.eu/recital-146-indemnity/ >154</a></li><li data-id=6366><a href=https://gdpr.eu/recital-147-jurisdiction/ >155</a></li><li data-id=6371><a href=https://gdpr.eu/recital-148-penalties/ >156</a></li><li data-id=6376><a href=https://gdpr.eu/recital-149-penalties-for-infringements-of-national-rules/ >157</a></li><li data-id=6381><a href=https://gdpr.eu/recital-150-administrative-fines/ >158</a></li><li data-id=6386><a href=https://gdpr.eu/recital-151-administrative-fines-in-denmark-and-estonia/ >159</a></li><li data-id=6391><a href=https://gdpr.eu/recital-152-power-of-sanction-of-the-member-states/ >160</a></li><li data-id=6396><a href=https://gdpr.eu/recital-153-processing-of-personal-data-solely-for-journalistic-purposes-or-for-the-purposes-of-academic-artistic-or-literary-expression/ >161</a></li><li data-id=6441><a href=https://gdpr.eu/recital-162-processing-for-statistical-purposes/ >162</a></li><li data-id=6446><a href=https://gdpr.eu/recital-163-production-of-european-and-national-statistics/ >163</a></li><li data-id=6451><a href=https://gdpr.eu/recital-164-professional-or-other-equivalent-secrecy-obligations/ >164</a></li><li data-id=6456><a href=https://gdpr.eu/recital-165-no-prejudice-of-the-status-of-churches-and-religious-associations/ >165</a></li><li data-id=6461><a href=https://gdpr.eu/recital-166-delegated-acts-of-the-commission/ >166</a></li><li data-id=6466><a href=https://gdpr.eu/recital-167-implementing-powers-of-the-commission/ >167</a></li><li data-id=6471><a href=https://gdpr.eu/recital-168-implementing-acts-on-standard-contractual-clauses/ >168</a></li><li data-id=6476><a href=https://gdpr.eu/recital-169-immediately-applicable-implementing-acts/ >169</a></li><li data-id=6481><a href=https://gdpr.eu/recital-170-principle-of-subsidiarity-and-principle-of-proportionality/ >170</a></li><li data-id=6486><a href=https://gdpr.eu/recital-171-repeal-of-directive-95-46-ec-and-transitional-provisions/ >171</a></li><li data-id=6491><a href=https://gdpr.eu/recital-172-consultation-of-the-european-data-protection-supervisor/ >172</a></li><li data-id=6496><a href=https://gdpr.eu/recital-173-relationship-to-directive-2002-58-ec/ >173</a></li></ul></div></div><div class="col-xl-8 col-lg-12 single-content"><div class=gdpr-article data-id=6266> <span class=tag>40</span><h1 class="gdpr"><em>Recital 127 </em><strong>Information of the supervisory authority regarding local processing</strong></h1><p>Each supervisory authority not acting as the lead supervisory authority should be competent to handle local cases where the controller or processor is established in more than one Member State, but the subject matter of the specific processing concerns only processing carried out in a single Member State and involves only data subjects in that single Member State, for example, where the subject matter concerns the processing of employees’ personal data in the specific employment context of a Member State. In such cases, the supervisory authority should inform the lead supervisory authority without delay about the matter. After being informed, the lead supervisory authority should decide, whether it will handle the case pursuant to the provision on cooperation between the lead supervisory authority and other supervisory authorities concerned (‘one-stop-shop mechanism’), or whether the supervisory authority which informed it should handle the case at local level. When deciding whether it will handle the case, the lead supervisory authority should take into account whether there is an establishment of the controller or processor in the Member State of the supervisory authority which informed it in order to ensure effective enforcement of a decision <em>vis-à-vis</em> the controller or processor. Where the lead supervisory authority decides to handle the case, the supervisory authority which informed it should have the possibility to submit a draft for a decision, of which the lead supervisory authority should take utmost account when preparing its draft decision in that one-stop-shop mechanism.</p><div class=rp4wp-related-posts><h3>Related Posts</h3><ul><li><div class=rp4wp-related-post-content> <a href=https://gdpr.eu/recital-124-lead-authority-regarding-processing-in-several-member-states/ >Recital 124 - Lead authority regarding processing in several Member States</a></div></li><li><div class=rp4wp-related-post-content> <a href=https://gdpr.eu/recital-94-consultation-of-the-supervisory-authority/ >Recital 94 - Consultation of the supervisory authority</a></div></li><li><div class=rp4wp-related-post-content> <a href=https://gdpr.eu/recital-128-responsibility-regarding-processing-in-the-public-interest/ >Recital 128 - Responsibility regarding processing in the public interest</a></div></li></ul></div></div></div></div></div></div></div></div></div></div></div></div><footer id=footer><div class=container><div class=post-author-details-box><div class=post-author-details><h6>About GDPR.EU</h6><p> </p><p>GDPR.EU is a website operated by Proton Technologies AG, which is co-funded by Project REP-791727-1 of the Horizon 2020 Framework Programme of the European Union. This is not an official EU Commission or Government resource. The europa.eu webpage concerning GDPR can be found <a href=https://ec.europa.eu/commission/priorities/justice-and-fundamental-rights/data-protection/2018-reform-eu-data-protection-rules_en target=_blank>here</a>. Nothing found in this portal constitutes legal advice.</p></div></div><div class=footer-top><div class=row><div class=col-sm-3> <br><h5>Getting Started</h5><br><div class=menu-deep-footer-column-1-container><ul class=fmenu><li id=menu-item-9315 class="menu-item menu-item-type-post_type menu-item-object-post menu-item-9315"><a href=https://gdpr.eu/what-is-gdpr/ >What is GDPR?</a></li><li id=menu-item-9316 class="menu-item menu-item-type-post_type menu-item-object-post menu-item-9316"><a href=https://gdpr.eu/fines/ >What are the GDPR Fines?</a></li><li id=menu-item-9317 class="menu-item menu-item-type-post_type menu-item-object-page menu-item-9317"><a href=https://gdpr.eu/checklist/ >GDPR Compliance Checklist</a></li></ul></div></div><div class=col-sm-3> <br><h5>Templates</h5><br><div class=menu-deep-footer-column-2-container><ul class=fmenu><li id=menu-item-9318 class="menu-item menu-item-type-post_type menu-item-object-post menu-item-9318"><a href=https://gdpr.eu/data-processing-agreement/ >Data Processing Agreement</a></li><li id=menu-item-9319 class="menu-item menu-item-type-post_type menu-item-object-post menu-item-9319"><a href=https://gdpr.eu/right-to-erasure-request-form/ >Right to Erasure Request Form</a></li><li id=menu-item-9320 class="menu-item menu-item-type-post_type menu-item-object-post menu-item-9320"><a href=https://gdpr.eu/privacy-notice/ >Writing a GDPR-compliant privacy notice</a></li></ul></div></div><div class=col-sm-3> <br><h5>Technical Review</h5><br><div class=menu-deep-footer-column-3-container><ul class=fmenu><li id=menu-item-9321 class="menu-item menu-item-type-post_type menu-item-object-post menu-item-9321"><a href=https://gdpr.eu/data-protection-officer/ >Data Protection Office Guide</a></li><li id=menu-item-9322 class="menu-item menu-item-type-post_type menu-item-object-post menu-item-9322"><a href=https://gdpr.eu/email-encryption/ >GDPR and Email</a></li><li id=menu-item-9323 class="menu-item menu-item-type-post_type menu-item-object-post menu-item-9323"><a href=https://gdpr.eu/companies-outside-of-europe/ >Does GDPR apply outside of the EU</a></li></ul></div></div><div class=col-sm-3> <br><h5>About Us</h5><br><p>GDPR.eu is co-funded by the <a href=https://ec.europa.eu/programmes/horizon2020/en/ >Horizon 2020</a> Framework Programme of the European Union <strong>and operated by Proton AG</strong>.</p></div></div></div><div class=formz><p> </p><p><strong>GDPR Forms and Templates</strong></p><p> <a href=/data-processing-agreement/ ><i class="far fa-file-alt"></i> <strong>Data Processing Agreement</strong> <i class="fa fa-chevron-right"></i></a> <a href=/right-to-erasure-request-form/ ><i class="far fa-file-alt"></i> <strong>Right to Erasure Request Form</strong> <i class="fa fa-chevron-right"></i></a> <a href=/privacy-notice/ ><i class="far fa-file-alt"></i> <strong>Privacy Policy</strong> <i class="fa fa-chevron-right"></i></a></p></div><p> </p><p class=copyright>© 2024 Proton AG. All Rights Reserved.</p><p class=text-center> <br> <a href=https://gdpr.eu/terms-and-conditions/ >Terms and Conditions</a>     <a href=https://gdpr.eu/privacy-policy/ >Privacy Policy</a></p></div></footer></div><div id=compliance_a style=display:none;> <a href=# class="close fa fa-times"></a> <img src=https://gdpr.eu/wp-content/themes/gdpr/images/gdpr_graphic.svg alt="GDPR Graphic"><p>GDPR compliance is easier with <strong>encrypted email</strong></p> <span><a target=_blank href="https://proton.me/business/gdpr?ref=gdpreu">Learn more <i class="fa fa-chevron-right"></i></a></span></div> <script>var cnArgs = {"ajaxurl":"https:\/\/gdpr.eu\/wp-admin\/admin-ajax.php","hideEffect":"fade","onScroll":"no","onScrollOffset":"100","cookieName":"cookie_notice_accepted","cookieValue":"true","cookieTime":"2592000","cookiePath":"\/","cookieDomain":"","redirection":"1","cache":"1","refuse":"yes","revoke_cookies":"0","revoke_cookies_opt":"automatic","secure":"1"};</script> <script src="https://gdpr.eu/wp-content/cache/minify/6fdea.js"></script> <script>Main.boot( [] );</script> <script src=https://cdn.jsdelivr.net/npm/js-cookie@2/src/js.cookie.min.js></script> <div id=cookie-notice role=banner class="cn-bottom bootstrap" style="color: #fff; background-color: #000;" aria-label="Cookie Notice"><div class=cookie-notice-container><span id=cn-notice-text>We use cookies to ensure that we give you the best experience on our website. If you continue to use this site we will assume that you are happy with it.</span><a href=# id=cn-accept-cookie data-cookie-set=accept class="cn-set-cookie cn-button bootstrap button">Ok</a><a href=# id=cn-refuse-cookie data-cookie-set=refuse class="cn-set-cookie cn-button bootstrap button">No</a><a href=https://gdpr.eu/privacy-policy/ target=_blank id=cn-more-info class="cn-more-info cn-button bootstrap button">Privacy policy</a></div><div class=cookie-notice-revoke-container><a href=# class="cn-revoke-cookie cn-button bootstrap button">Revoke cookies</a></div></div> <script defer src=https://gdpr.eu/wp-content/cache/autoptimize/js/autoptimize_5dd90da4735596921829dacc461fe36f.js></script></body></html>