Welcome back. This is Emlex's weekly podcast covering the top regulatory stories of the week. My name is James Panicki. I'm Emlex's Asia Pacific Senior Editor Editor and it's great to have your company.

In just over 10 minutes time we'll be walking you through a great trade yarn which

looks at the use of safeguards in post-Brexit Europe. The cracks between the EU and the UK

on steel importation restrictions point to a growing trade tension between the two sides, an issue that

we seem to be returning to time and time again here on the MMEX podcast. And Puppie Carnell

will be joining us from the UK to tell us everything that we need to know about that.

First up, though, a central part of the EU's ambitious privacy legislation, the General Data Protection Regulation or GDPR, was put to the test recently.

A European court had been asked whether Belgium's data privacy enforcer was entitled to pursue an investigation into Facebook over the platform's use of cookies,

or whether it was in fact required to refer the matter to its Irish counterpart

under the so-called one-stop shop arrangement,

and the court's decision isn't quite as cut and dried as you may expect.

There's so much to unpack here, and who better to help us with that,

than Matthew Newman, Mlex's chief

correspondent covering data protection and privacy from Brussels. Okay Matthew so let's start with an

overview here given that there are many complexities to cover what did the EU Court of

Justice decide about the GDPR's one-stop shop in the Belgian Facebook case?

Hello, James. Yes, it's great to talk to you about this case because it marks the first time that the EU's highest court has ruled on the one-stop shop in the EU's general data protection regulation. That's GDPR known around the world.

So under that regulation, the one stop shop means that companies are regulated in only one country

in the 27 nation European Union, and that is the country where they have their main establishment.

So according to the

court, a national supervisory authority under certain conditions provided for in the GDPR

can exercise its power to bring an infringement of the GDPR to the attention of a national court

...