Consistency Mechanism (EDPB)
Article 63 GDPR — EU-wide supervisory coordination
Practitioner's note: This article is practice-oriented compliance documentation, not legal advice. We are a compliance specialist, not a law firm. For legally binding information please consult a licensed lawyer.
TL;DR
For cross-border processing (Article 60 GDPR), the lead supervisory authority issues the decision, while other supervisory authorities may submit opinions. In the event of disagreement: EDPB majority vote (Article 65).
What is the Consistency Mechanism (EDPB)?
Practical cases: Meta, Google, X — Irish DPC acting as lead. Other supervisory authorities may object; the EDPB decides in case of dispute. Median proceedings duration: 18-30 months.
Practical example
Meta advertising proceedings: the Irish DPC decides, the German and Dutch DPCs object. The EDPB confirms the stricter approach.
Frequently asked questions
Which authority is the lead?
The supervisory authority of the company's main establishment in the EU.
How long does it take?
Median of 18-30 months. EDPB escalation adds another 6-12 months.