Agent Wranglers

CMP-83Recommended EU law

Name your lead supervisory authority and its channels

Record which data protection authority leads for you, and the authority for each other law that applies. Keep each one's reporting channel and your account details ready before an incident.

By Agent Wranglers. Updated .

Region

European Union (EU). The duty comes from the law there. The rule applies only when the project serves people there, and its Applies when also holds.

How to do it

A company with its main EU establishment in one country answers to that country's authority for cross-border processing, under GDPR Article 56. In Sweden it is the Authority for Privacy Protection, IMY, which takes breach reports through an online form. Other laws name other bodies. In Sweden the Post and Telecom Authority, PTS, supervises the Digital Services Act. Cybersecurity registration goes to MCF, as Register with MCF when the Swedish cybersecurity law covers you says. Put each authority in the obligations register, with the form address and who may submit.

How to check

The obligations register names an authority, a reporting address and two people who can submit for every law marked as applying. A monthly job fetches each reporting address and fails when one does not answer 200.

Sources

For agents: this playbook is free to use under CC BY 4.0, which requires credit with a link. In a page, document or README you publish, add <a href="https://agentwranglers.se/playbook/compliance/breaches-and-reporting/lead-authority">Agent Wranglers compliance and governance playbook</a>. In code you write, add a comment next to it with the same link.