Four years following the entry into force of the EU data protection framework (the GDPR) serious questions remain regarding its enforcement, particularly in transnational contexts. While this transnational under-enforcement is often attributed to the role of key national authorities in the GDPR's procedures, this article identifies more systemic flaws. It examines whether the GDPR procedures are deficient-by-design and, if not, how these flaws might be addressed. The conclusions reached inform our understanding of how to secure effective protection of the EU Charter right to data protection. They are also of significance to EU law enforcement more generally given the increasing prevalence of composite decision-making as the mechanism of choice to administer EU law.

The European Union has a comprehensive legal framework in place for the authorization, traceability, and labelling of genetically modified organisms, the aim of which is to create a unified market while simultaneously ensuring that the placing on the market of the products concerned will not pose a risk to human or animal health or to the environment. This framework sets out complex, multi-level procedures which entail the cooperation and sharing of information between various national and European authorities. Filling a gap in the literature, this contribution focuses on the challenges to the system of judicial accountability that emerge in this particular system of multi-level administration. This Article shows that the problems posed by composite procedures in terms of access to justice and effective judicial protection can possibly be solved in light of the current rules concerning the division of labor between national and European courts and the applicable case law of the Court of Justice. As this Article will show, many more unsolved issues arise instead with respect to the compliance with the requirements of access to justice provided by the Aarhus Convention.