The author is a PhD researcher at the European University in Florence, working on a project ‘EU Administrative Law on the Ground: Inside Cooperation between the National Data Protection Authorities’ under supervision of prof. Deirdre Curtin. For correspondence: <maria.magierska@eui.eu>.