clydes – Highest EU court strengthens regulatory enforcement under GDPR – and the one-stop-shop

In its recent decision in the case Facebook Ireland Ltd and Others v Gegevensbeschermingsautoriteit (the Belgian data protection supervisory authority) dated 15 June 2021 (case C‑645/19), the Court of Justice of the European Union (CJEU) strengthened regulatory enforcement under the EU General Data Protection Regulation (GDPR) by allowing member state data protection supervisory authorities to directly sue private companies under Article 58 para. 5 GDPR – irrespective of whether the respective member state law provides for such a right to sue.