The one-stop-shop mechanism means:

• A.A controller can choose any supervisory authority, per Article 65, which gives the European Data Protection Board only advisory power with no binding decision-making role in disputes
• B.A controller only needs to deal with one supervisory authority for cross-border processing
• C.Only one supervisory authority exists in the EU, under Article 83(5), which sets the higher fine tier at 4 percent of global annual turnover or EUR 20 million, whichever is lower
• D.All supervisory authorities must agree on every decision