Print

Privacy in the EU Institutions

Regulation (EU) 2018/1725 lays down the data protection obligations for the EU institutions, bodies and agencies when they process personal data and develop new policies. This regulation also defines the obligations of the EDPS, including his role as an independent supervisory authority of EU institutions and bodies when they process personal data, and to advise on policies and legislation which affect privacy and cooperate with similar authorities to ensure consistent data protection.

 

 

 

Filters

19
Dec
2007

Contrôle qualité du travail et gestion du ranking - Centre de Traduction

Avis du 19 décembre 2007 sur la notification d'un contrôle préalable à propos du dossier "Contrôle qualité d'un travail de traduction d'un contractant freelance et gestion du ranking" (Dossier 2007-154)

Available languages: French
18
Dec
2007

Fraud notification service - OLAF

Opinion of 18 December 2007 on a notification for prior checking on the fraud notification service (Case 2007-481)

The Fraud Notification Service is a web based information system that OLAF has put at the public's disposal in order to facilitate the collection of information to use in the fight against fraud, corruption and other illegal activities affecting the financial interests of the Community.  Members of the public can provide the information by completing a questionnaire and they can register to have two-way communications with OLAF. The messages are reviewed automatically and also by review officers. Upon review of the information, OLAF decides whether the matter merits initiation of the assessment stage, or should be classified as a prima facie non-case. If an assessment is initiated, then the matter will be assigned a CMS number and the investigator will place all information received through the system in the CMS file.
 
In his opinion, the EDPS concluded that OLAF should implement certain recommendations, including: 
  • ensuring the deletion of pointless messages as well as avoiding asking questions that would lead informants to disclose information that is irrelevant for the purposes of detecting fraud and corruption affecting the financial interests of the Community.
  • ensuring the right to information, access and rectification to those who have been named by the users of the Fraud Notification Service, subject to the application of the exceptions provided for in the Regulation.
  • ensuring that the conservation period of irrelevant information is kept as short as possible and in any event for no longer than one year.
  • inserting a link in the privacy policy at the webpage through which visitors who want to use the Fraud Notification Service must necessarily go through or alternatively in a very prominent way, immediately after or before the information on the Fraud Notification Service.
Available languages: English, French
17
Dec
2007

Career development - European Maritime Safety Agency

Opinion of 17 December 2007 on a notification for prior checking concerning "Annual career development" (Case 2007-568)

All officials, temporary and contractual agents working for the European Maritime Safety Agency (EMSA) are subject to yearly evaluation reports concerning their ability, efficiency and conduct. The purpose of the data processing in question is the subsequent career development review, promotion/reclassification exercise, follow-up of individual training plans and renewal of temporary agent or contract agent contract.
 

The EDPS has issued an opinion on the evaluation of the EMSA staff. The EDPS concludes that on a general basis the procedure complies with the principles established in the data protection regulation. However the EDPS did make some recommendations mainly as concerns the need to collect some data, the information of the persons concerned as well as the appropriate time-limit for the storage of data.

Available languages: English, French