1 The decision should be agreed jointly by the lead supervisory authority and the supervisory authorities concerned and should be directed towards the main or single establishment of the controller or processor and be binding on the controller and processor. 2 The controller or processor should take the necessary measures to ensure compliance with this Regulation and the implementation of the decision notified by the lead supervisory authority to the main establishment of the controller or processor as regards the processing activities in the Union.
This recital of the General Data Protection Regulation clarifies article 56 GDPR (Competence of the lead supervisory authority), article 60 GDPR (Cooperation between the lead supervisory authority and the other supervisory authorities concerned) and article 62 GDPR (Joint operations of supervisory authorities).*
