Ms Jennifer O'Sullivan:

We were in close dialogue with the CNIL and other EDPB members to examine the particular situation. In the original drafting of the GDPR, it was not envisaged that there would be a situation where a company had indicated it intended to set up a controllership but had not yet done so, and where in that intervening period a significant complaint would be received.