Is Centralised General Data Protection Regulation Enforcement a Constitutional Necessity?

Abstract

Protection of personal data as a fundamental right – GDPR’s enforcement dilemma in cross-border cases – “One-stop-shop” model’s inadequacies highlighted – Distinction: regular cross-border enforcement versus cases of common European concern – Proposal: centralised enforcement mechanism for cases of common European concern – Union supervisory authority as a solution – Insufficiencies of the harmonisation proposal of the European Commission – Centralisation’s advantages: uniform enforcement, better coordination, and curbing forum shopping – Implications: fundamental rights protection and EU’s constitutional obligations – Constructive critique of the one-stop-shop model, not a dismissal – European constitutional law mandates effective data protection enforcement.