Filers who named this exact article number in their own text. It is their sentence, not our reading — and not a causal claim.
| Who | Country | What they wrote |
|---|---|---|
| ANITEC-ASSINFORM | IT | in delays with many CSAs seeking to ‘have their say’ and undermine the one‐stop‐shop mechanism and the LSA’s competence under Article 56 of the GDPR. We note that the application of Article 60 is currently being considered as part of the Commis ↗ |
| ZKI e.V. | DE | ichkeit der Zuständigkeit einer federführenden Aufsichtsbehörde sollte nicht auf grenzüberschreitende Verarbeitungsvorgänge gemäß Art. 56 DSGVO beschränkt bleiben, sondern auch auf nationale Verarbeitungsvorgänge Anwendung finden. Letzteres gilt insbesondere i ↗ |
| Bitkom e.V. | DE | s & Procedures 6 2 Comments on Chapter III – Cooperation under Article 60 of the GDPR Cooperation It is important to maintain the Article 56 competence of the lead supervisory authority (LSA) in its cooperation with Competent Supervisory Authorities (CSAs) as ↗ |
| ITI - Information Technology Industry Council | US | and reasoned objections (RROs) made by the concerned supervisory authorities (CSAs). Maintaining the competences of the LSA under Article 56 of the GDPR is the most effective method for ensuring the efficient handling of complaints. Maintaining the competences ↗ |
| Hans-Hermann Schild | DE | egründung, I. Kontext des Vorschlages, Gründe und Ziele des Vor- schlages, S. 1 COM (2023) 348 final. 37 Zum Eintrittsrecht nach Art. 56 Abs. 2 DSGVO siehe Anmerkung Schild, zu Schlussantrag GA Bobeek vom 13.1.2021 – C-645/19, ZD 2021, 203; EuGH, Urteil vom 1 ↗ |
| LA POSTE | FR | te Groupe encourage toutefois la Commission européenne à veiller à ce que le mécanisme de guichet unique, introduit en vertu de l'article 56 du RGPD, soit maintenu et renforcé afin de garantir des conditions de concurrence équitables et la sécurité juridique p ↗ |
| noyb | AT | competence of the SA The absence of deadline regarding whether a SA considers itself competent delays the procedure (by contrast, Article 56(3) GDPR provides that when a case is transferred by an SA to a LSA, the latter has 3 weeks to confirm whether it will h ↗ |
| Ecommerce Europe | BE | with Article 56(1) GDPR, we sometimes experience that other DPAs approach companies on the basis of Article 56(2) GDPR. More specifically, the respective authorities argue that the case in question is considered as “local” and that they would be competent for ↗ |
| Asociación Española de Economía Digital (Adigital) | ES | controller’s main establishment is the only point of contact competent for this controller’s cross-border processing operations (Article 56(1) GDPR). ● In this context, the LSA must cooperate sincerely and effectively with other SAs (Article 63(ff) GDPR). Thi ↗ |
| American Chamber of Commerce to the EU (AmCham EU) | BE | operations (Article 56(1) GDPR). In this context, the LSA must cooperate effectively with other SAs (Article 61 GDPR). This harmonised regulatory framework, like the GDPR’s substantive provisions, serves to achieve two goals: the same high level of protection ↗ |
| American Chamber of Commerce in Poland | PL | controller’s main establishment is the only point of contact competent for this controller’s cross-border processing operations (Article 56(1) GDPR). • In this context, the LSA must cooperate sincerely and effectively with other SAs (Article 63(ff) GDPR). Thi ↗ |
| Związek Pracodawców Branży Internetowej IAB Polska | PL | , LSA) i jest jedynym punktem kontaktowym właściwym dla transgranicznych operacji przetwarzania danych przez tego administratora (art. 56 ust. 1 RODO). Koncepcja OSS upraszcza firmom transgraniczne prowadzenie działalności i zapewnia pewność prawną i biznesową ↗ |
| ITI - Information Technology Industry Council | US | the primacy of Member States’ national laws in this respect. Clarifying SA Competence Under Art. 56(2) GDPR Under Art. 56(2), SAs can handle a complaint “if the subject matter relates only to an establishment in its Member State or substantially affects data s ↗ |
| DOT Europe | BE | basis of Article 56(1) GDPR, without needing to meet further or heightened criteria which are not provided in the GDPR. Another relevant issue that merits clarification is the GDPR provisions on local cases, which can undermine the lead SA concept. Despite the ↗ |
| Polish Confederation Lewiatan | PL | controller’s main establishment is the only point of contact competent for this controller’s cross-border processing operations (Article 56(1) GDPR). • In this context, the LSA must cooperate sincerely and effectively with other SAs (Article 63(ff) GDPR). ↗ |
| AmCham Slovenija | SI | controller’s main establishment is the only point of contact competent for this controller’s cross-border processing operations (Article 56(1) GDPR). In this context, the LSA must cooperate sincerely and effectively with other SAs (Article 63(ff) GDPR). Thi ↗ |
| CCIA - Computer & Communications Industry Association | BE | only to an establishment in [the] Member State [of the SA] or substantially affects data subjects only in its Member State” under Article 56(2) GDPR, and to clarify the extent to which SAs are permitted to conduct preliminary assessments for the LSA. We also i ↗ |
| Centre for Information Policy Leadership (CIPL) | BE | establishment in the local state or affects individuals in that state only. Where the LSA decides to handle the case pursuant to Article 56(4) of the GDPR, the LSA is not bound by the draft decision prepared by the CSA but shall only “take utmost account of t ↗ |
| European Digital Rights (EDRi) | BE | der an SA to adopt a decision under Article 66 if the case is not moving fast enough - to order the SAs to adopt a decision under Article 56) - to compensate the complainant for damages if the delay to handle the complaint is not duly justified by the SA.3 Lac ↗ |
| Internet Corporation for Assigned Names and Numbers | US | ng out cross-border processing. The one-stop shop mechanism needs to be correctly applied taking into account the requirements of Art. 56 (1) GDPR, which stipulates that “the supervisory authority of the main establishment or of the single establishment of the ↗ |
| David Erdos | GB | ing, enforcement and investigatory tasks allocated (GDPR, art. 57) especially in the coordinated area of cross-border processing (art. 56). Where a lead supervisory authority is unable to handle a concern expeditiously then it should be obliged to adopt a faci ↗ |
| EDiMA | BE | tizens’ fundamental rights to data protection and privacy, while allowing business in Europe to thrive and compete. As set out in Art. 56 GDPR, and as confirmed, without reservation by the Commission in past statements, the OSS is a core harmonising EU princip ↗ |
| Open Rights Group | GB | ns from the Belgian and Irish authorities. At this time the Hungarian DPA is not willing to take further steps. The DPA refers to Article 56.1 of the GDPR which states that the supervisory authority of the main or the single establishment of the controller or ↗ |
| DIGITALEUROPE | BE | investigation and enforcement procedures and promoting consistent interpretation across the EU. 9 Art. 62 GDPR 10 Art. 56 GDPR 7 The reality is that national laws implementing the GDPR have made maximal use of the margin of manoeuvre that the text allowed. Thi ↗ |
| European Publishers Council | GB | which are unknown to end-users as they are further down the ad tech funnel. These players may find it preferable – or in 15 GDPR, Article 56(1). 16 European Commission, “The GDPR: new opportunities, new obligations – What every business needs to know about the ↗ |
| Centre for Information Policy Leadership (CIPL) | GB | to interact with a single regulatory interlocutor in the EU for all cross- border EU data protection-related matters in line with Article 56(6) of the GDPR.8 This is all the more relevant in the context of the COVID-19 crisis where organisations need to react ↗ |
| Computer & Communication Industry Association (CCIA) | US | several Member States; and Joint Statement on the final adoption of the new EU rules for personal data protection (2016); 5 See Article 56(2) GDPR; 6 See Article 51(2) GDPR; CCIA Europe | Rue de la Loi 227, 1040 Brussels | www.ccianet.org | Transparency Reg ↗ |
| ACT | The App Association | BE | raging cooperation between national DPAs. Notably, steps should be taken to avoid certain DPAs acting in conflict with clear GDPR Article 56 policies designating a Lead Authority. ↗ |
| Information Technology Industry Council | BE | ies, they will take into consideration the requirements and guidelines of the Lead Authority and follow the procedure outlined in Article 56 of the GDPR. A genuine, strong cooperation among the EU’s DPAs is essential for a coherent application and enforcement ↗ |
Source: public consultation submissions and position papers. n = 29 mentions; counted as a literal reference to the article number.