Recitals
Recital 128
Recital 128
Public Authorities Outside the One-Stop-Shop Unofficial title
The rules on the lead supervisory authority and the one-stop-shop mechanism should not apply where the processing is carried out by public authorities or private bodies in the public interest. In such cases the only supervisory authority competent to exercise the powers conferred to it in accordance with this Regulation should be the supervisory authority of the Member State where the public authority or private body is established.
https://gdpr.digiphile.law/recital/recital-128.html
Text as at 19 September 2026.
This is an unofficial convenience version of the EU GDPR (Regulation (EU) 2016/679). It is presented “as is” without guarantee of accuracy, completeness or reliability. See the source text for the official version. This site was last updated in September 2026.