1The rules on the lead supervisory authority and the one-stop-shop mechanism should not apply where the processing is carried out by public authorities or private bodies in the public interest. 2In such cases the only supervisory authority competent to exercise the powers conferred to it in accordance with this Regulation should be the supervisory authority of the Member State where the public authority or private body is established.
* This title is an unofficial description.
Why Recital 128 Matters for GDPR Compliance?
Recital 128 matters for GDPR compliance because it establishes that the one-stop-shop mechanism does not apply to processing carried out in the public interest. In such cases, only the local supervisory authority has jurisdiction. This ensures that sensitive public-sector processing is regulated at the national level where it is most relevant.