Article 60 GDPR
Cooperation between the lead supervisory authority and the other supervisory authorities concerned

1. The lead supervisory authority shall cooperate with other affected supervisory authorities in accordance with this Article to reach an agreement. The lead supervisory authority and the supervisory authorities concerned shall exchange all relevant information.

2. The lead supervisory authority may at any time request mutual assistance from other supervisory authorities concerned in accordance with Article 61 and may conduct joint operations in accordance with Article 62, in particular to conduct an investigation or monitor the implementation of a measure concerning a controller or processor with an establishment in another Member State.

3. The lead supervisory authority shall promptly provide the other supervisory authorities concerned with relevant information regarding the case. It shall promptly submit a draft decision to the other supervisory authorities concerned for their opinion and due consideration of their comments.

4. If, within four weeks of receiving a request for an opinion pursuant to paragraph 3 of this Article, another supervisory authority concerned raises a relevant and reasoned objection to the draft decision, the lead supervisory authority — if it does not accept the relevant and reasoned objection or considers that the objection is not relevant or is not reasoned — shall refer the matter to the consistency mechanism referred to in Article 63.

5. If the lead supervisory authority intends to grant a relevant and reasoned objection raised, it shall submit a revised draft decision to the other supervisory authorities concerned for their opinion. The amended draft decision shall be subjected to the procedure referred to in paragraph 4 within two weeks.

6. If, within the period referred to in paragraphs 4 and 5, no other supervisory authority concerned objects to the draft decision submitted by the leading supervisory authority, the leading supervisory authority and the supervisory authorities concerned shall be deemed to have agreed on the draft decision and to be bound by it.

7. The lead supervisory authority shall adopt the decision and serve it on the main or single organizational unit of the controller or processor, as appropriate, and inform the other supervisory authorities concerned and the European Data Protection Board of the decision, attaching a summary of the facts and reasons for the decision. The supervisory authority to which the complaint was filed shall inform the complainant of the decision.

8. As an exception to paragraph 7, if the complaint is dismissed or rejected, the supervisory authority to which the complaint was filed shall adopt the decision and serve it on the complainant and inform the administrator of the decision.

9. If the lead supervisory authority and the supervisory authorities concerned have agreed on the dismissal or rejection of a part of the complaint and on action against other parts of the complaint, a separate decision shall be adopted for each part. The lead supervisory authority shall adopt a decision on the part concerning action against the controller and serve it on the main or single organizational unit of the controller or processor on the territory of its Member State and inform the complainant thereof, and the complainant's supervisory authority shall adopt a decision on the part concerning dismissal or rejection of that complaint, serve it on the complainant and inform the controller or processor thereof.

10. Upon notification to the controller or processor of the decision of the leading supervisory authority in accordance with paragraphs 7 and 9, they shall take the necessary steps to comply with the decision as regards processing activities within all their organizational units in the Union. The controller or processor shall notify the lead supervisory authority of the steps taken to comply with the decision, which shall inform the other supervisory authorities concerned.

11. If, in exceptional circumstances, the supervisory authority concerned has reason to believe that there is an urgent need to take action to protect the interests of data subjects, the urgent procedure referred to in Article 66 shall apply.

12. The lead supervisory authority and other supervisory authorities concerned shall provide each other with the information required under this Article electronically in a standard format.