Within the Plenary of the European Data Protection Board that took place in February 2024, Opinion 04/2024 on the notion of main establishment of a controller in the Union under Article 4(16)(a) GDPR was adopted.

Within this document it is shown that the place where the central management of the controller within the European Union is located can be considered as main headquarters, in the sense of Article 4 point 16 letter a) from the General Data Protection Regulation, if at this headquarters are taken the decisions on the personal data processing purposes and means and if this headquarters has the attribution to order the application of these decisions.

More information is available at the address: https://edpb.europa.eu/news

Legal and Communication Department

A.N.S.P.D.C.P.