A national supervisory authority opens an investigation into a local bakery that only serves domestic customers in that Member State. What does this scenario best illustrate?
Select an answer to reveal the explanation.
Short Explanation
A hometown bakery with hometown customers still sits under the hometown privacy referee. National SAs can investigate and use corrective powers on their territory—no need to drag in the whole EU board for a local shop.
Full Explanation
Each supervisory authority is competent to perform tasks and exercise powers on the territory of its own Member State. A purely domestic controller can be investigated by its national SA without invoking cross-border lead-authority mechanics as a prerequisite. Local businesses processing personal data are not automatically outside GDPR scope.