“The good news is that the GDPR already has the antibodies in place to cure the inaction of supervisors,” said Vincenzo Tiani, resident partner at Panetta law firm. Tiani pointed to a ruling of the Court of Justice of the European Union that in June opened the door to having non-leading authorities initiate GDPR-related investigations under specific circumstances.
“In cases where requests from a supervisory authority to a colleague are not dealt with within one month, the supervisory authority may take temporary autonomous measures and the matter will be referred to the EDPB,” Tiani noted.
…
