Rob Corbet is a Partner at Arthur Cox — the views
expressed are his own
At the time of writing, it appears that the so called 'one
stop shop' mechanism in the proposed EU Data Protection
Regulation is being further diluted. At the recent meeting of the
Permanent Representatives Committee ('COREPER') on 25th
February 2015, new amendments were proposed to the draft
Regulation, the impact of which will be significant for the many
companies established in Ireland who deal with customers across the
EU. The main proposed changes relate to the process to be applied
in the context of investigation of data protection issues which
have a cross border dimension.
Main establishment
The original text of the Regulation anticipated that a data
controller would have a single 'main establishment' which
would provide it with a one stop shop in terms of data protection
oversight. This principle was intended to assuage concerns under
the existing Data Protection Directive