Skip to main content
European Citizens' Initiative

Data Protection Guidance - Question 17

Go back to the main page of the Data Protection Guidance for the organisers


Data Protection Guidance - Question 17

Which national supervisory authority should you contact for issues relating to the processing of personal data? 

By its nature, the process of collecting statements support in at least seven Member States is cross-border and several data protection authorities (DPA) may be competent.

For all actors concerned, it is easier to deal with only one DPA, which is feasible under the concept of a ‘lead supervisory authority’ or ‘LSA’ under the GDPR. The lead DPA is defined as the supervisory authority of the Member State of the main establishment or of the single establishment of the controller.

However, signatories may lodge a complaint with the LSA or with the DPA of the Member State where they usually reside, their place of work or the place of the alleged infringement if they consider that their data is unlawfully processed.


Want to learn and collaborate?