CADA tracker · source extraction
Article 28
Cross-border cooperation
1. Where a competent authority of destination has reason to suspect that a cloud
computing service provider no longer fulfils the requirement under Annex II to this
Regulation, it may request the competent authority of establishment to assess the
matter and to take the necessary investigatory and enforcement measures to ensure
compliance.
2. The Commission may also request the competent authority referred to in Article 25
to assess the matter and take the necessary investigatory and enforcement measures
to ensure compliance.
3. Requests pursuant to paragraph 1 or 2 shall be duly reasoned and shall be duly taken
into account by the competent authority of establishment. Where the competent
authority of establishment considers that the information provided is insufficient, it
may either request additional information. The period set out in paragraph 4 shall be
suspended until that additional information is provided
4. The competent authority of establishment shall, as soon as possible and in any event
not later than two months after receipt of the request pursuant to paragraph 1 or 2,
communicate to the competent authority that sent the request, and the Commission,
its assessment of the suspected infringement and an explanation of any investigatory
or enforcement measures taken or envisaged in relation to the matter to ensure
compliance with this Regulation.
Chapter II
Demand-side measures
SECTION 1
PUBLIC PROCUREMENT