Regulation (EU) 2018/1725 lays down the data protection obligations for the EU institutions, bodies and agencies when they process personal data and develop new policies. This regulation also defines the obligations of the EDPS, including his role as an independent supervisory authority of EU institutions and bodies when they process personal data, and to advise on policies and legislation which affect privacy and cooperate with similar authorities to ensure consistent data protection.
Answer to a notification for prior checking concerning "Presence registration of staffat JRC-IRMM in Geel" (Case 2008-771)
Opinion of 14 September 2009 on the notification for prior checking concerning "Data processing with regard to accident insurance" (Case 2004-0257)
Answer to the notifications of prior checking related to the "introduction of flexitime - test phase" (Cases 2009-473 and 2009-476)
Opinion of 28 July 2009 on a notification for prior checking concerning "Evaluation of the President and the Cice-President of the CPVO" (Cases 2009-355 and 2009-356)
The Community Plant Variety Office (CPVO) submitted to the EDPS two notifications for prior checking concerning annual appraisal, probationary period and management trial period of the President of the CPVO and of the Vice-President of the CPVO. Those appraisals are conducted by the reporting officers who are two members of the Administrative Council of the Office (AC) appointed by the AC.
The EDPS has examined the personal data processing involved in this processing and has concluded that it does not seem to entail any breach of the provisions of Regulation (EC) No 45/2001 provided that certain recommendations are followed, in particular that the service responsible should establish a shorter retention period for all paper and electronic files, remind all recipients of data of their obligation not to use the data received for any further purpose beyond the purposes stated in the relevant CPVO Decisions and provide appropriate information to the persons concerned.
Opinion of 27 July 2009 on a notification for prior checking regarding applications to work part time (Case 2009-396)
The EDPS performed a prior checking on the processing of data under the procedure for handling applications to work part time. The processing operation is subject to prior checking as it involves an evaluation of the data subject, insofar as the decision to grant part-time work is based on the interests of the service and takes into account the grounds given in support of the application, but also insofar as it is possible for part time work to be refused.
The EDPS took the view that the processing operation would not appear to involve any breach of the provisions of Regulation (EC) No 45/2001, provided that account is taken of certain observations. In particular, recipients should be reminded that they may only process personal data received in connection with the procedure for applying for part-time work for that specific purpose and that if authorisation to work part-time is refused and the opinion of the Joint Committee has to be obtained, the person concerned should be allowed access to the Joint Committee's opinion for the data concerning him.