The opinion clarifies the notion of the main establishment of a controller under Article 4(16)(a) GDPR, and the criteria for the application of the one-stop-shop mechanism, in particular regarding the notion of the controller’s “place of central administration” in the Union.
Author: European Data Protection Board
Status: Adopted / Published
Adoption date: 2024-02-13
Last updated: 08 Aug 2025
Category: Guidance
Subcategory: Other official document