According to the GDPR, what should the Dutch Supervisory Authority do in this scenario?

A German company wants to enter into a binding contract with a processor in the Netherlands for the processing of sensitive personal data of German data subjects. The Dutch Supervisory Authority is informed of the type of data and the aims of the processing, including the contract describing what data will be processed and what data protection procedures and practices will be in place.

According to the GDPR, what should the Dutch Supervisory Authority do in this scenario?
A . Report the data processing to the German Supervisory Authority and leave the supervising to them.
B . Supervise the processing of personal data in accordance with Dutch Law.
C . Supervise the processing of personal data in accordance with German Law.
D . The Dutch Supervisory Authority should check that adequate binding contracts are in place. The German Supervisory Authority should supervise.

View Answer

Answer: D