The Lead-Supervisory-Authority<\/a> (LSA) is a regulatory body established under the General-Data-Protection-Regulation<\/a> (GDPR) to streamline the oversight of companies that engage in Cross-Border-Processing<\/a>. This system is central to the One-Stop-Shop<\/a> mechanism, which allows organizations to deal with a single primary regulator for their data protection activities across the European-Union<\/a>.<\/p> According to GDPR Article 56<\/a>, the Lead-Supervisory-Authority<\/a> is determined by the location of the organization's Main-Establishment<\/a>. This is typically where the Data-Controller<\/a> or Data-Processor<\/a> has its central administration, unless the decisions on the purposes and means of processing are taken elsewhere. The European-Data-Protection-Board<\/a> (EDPB) provides specific Guidelines on the Lead Supervisory Authority<\/a> to help businesses identify their relevant regulator.<\/p> While the Lead-Supervisory-Authority<\/a> leads investigations, it must coordinate with any Concerned-Supervisory-Authority<\/a> (CSA). A CSA is an authority that has a stake in the processing because the controller is established in its territory or Data-Subjects<\/a> in its territory are significantly affected. This collaborative approach is maintained through the Consistency-Mechanism<\/a> to ensure uniform application of law across all member states.<\/p>Identification and Jurisdiction<\/h2>
Cooperation and Consistency<\/h2>