A Practice Note discussing cross-border enforcement and the one-stop shop under the EU General Data Protection Regulation (GDPR). This Note discusses the applicability of the one-stop shop, how organizations can identify their lead supervisory authority, and the GDPR's cooperation and consistency mechanisms relating to cross-border enforcement.