Print

Privacy in the EU Institutions

Regulation (EU) 2018/1725 lays down the data protection obligations for the EU institutions, bodies and agencies when they process personal data and develop new policies. This regulation also defines the obligations of the EDPS, including his role as an independent supervisory authority of EU institutions and bodies when they process personal data, and to advise on policies and legislation which affect privacy and cooperate with similar authorities to ensure consistent data protection.

 

 

 

Filters

12
Oct
2007

Criminal assistance cases - OLAF

Opinion of 12 October 2007 on a notification for prior checking on criminal assistance cases (Case 2007-203)

The activities of OLAF in criminal assistance cases aim at facilitating and coordinating investigations carried out by the relevant national authorities in order to protect the Community's financial interests. In these cases, the competent authorities of a Member State, candidate country or third country carry out criminal investigations and request OLAF's assistance or OLAF offers its assistance. During these activities OLAF processes personal data of individuals.
 
When OLAF considers whether to open a criminal assistance case or not, it evaluates the initial information received to determine whether it relates to the protection of the EU's financial interest. This evaluation may involve the assessment of individual involvements. Once a criminal assistance case is open, the assistance provided by OLAF includes organising meetings, gathering and forwarding information and facilitating the execution of mutual (administrative and legal) assistance requests. 
 
After scrutinising the data processing activities in the light of the data protection requirements of Regulation 45/2001, the EDPS made a number of recommendations. Those concern, among others, the way to ensure respect for the data quality principle, the requirements for transfer of data, the right of access and rectification of the data subjects and the right to receive appropriate information about the processing operation.
Available languages: English, French
11
Oct
2007

Absences due to illness - Commission

Opinion of 11 October 2007 on the notification for prior checking regarding the "Checks on absences due to illness - Brussels, Luxembourg" case (Case 2004-226)

The purpose of the procedure for checks on absences due to illness by the Brussels and Luxembourg Medical Services is to ensure that an absence due to illness is justified and that its duration is in proportion to the nature of the illness.

The criteria for checks are: absences totalling 20 days or more over a two-month period, in the light of the diagnosis (if recorded in the medical certificate); and the proportionality of the absence to the nature of the illness. These criteria for checks are used to produce SERMED extracts.

The examining doctor examines situations on a case-by-case basis to decide whether a medical examination is warranted. During the medical examination, the examining doctor examines the data subject (where an examination is warranted by the medical condition alleged) and asks him questions. At the end of the examination, a document is signed by the examining doctor and the data subject and sent by secure means to the HRD. If the data subject considers the conclusions of the examining doctor to be unjustified, he may request that the matter be referred to arbitration by an independent doctor.

An Excel table is created and managed by the examining doctor for the medical monitoring on an individual and global basis of the population concerned. The table can be accessed by the medical officer and his secretariat only.

The EDPS has concluded that the processing operation does not appear to involve any infringement of the provisions of Regulation (EC) No 45/2001 provided that certain recommendations are taken into account, in particular:

  • as regards data entered in SERMED and, specifically, the "comments" box, steps should be taken to ensure that no personal notes made by the doctor himself appear in the "comments" box unless such notes are necessary to enable the examining doctor to monitor absences. In this event, only the examining doctor should have access to the box in question.
  • that the Commission give consideration to how long medical examination files for the purposes of checks should be kept in the light of the purposes of the processing operation.
  • that the Commission look into the possibility of giving the data subject access to the Excel file without this entailing access to data relating to other persons or the doctor's personal notes.
Available languages: English, French
9
Oct
2007

Sysper 2 : promotion - Commission

Opinion of 9 October 2007 on the notification for prior checking on "SYSPER 2: promotion" (Case 2007-192)
The Promotion module of SYSPER 2 is the IT tool the Commission uses to manage the annual promotion exercise and implement the provisions of Article 45 of the Staff Regulations of Officials of the European Communities, which provide that the Appointing Authority shall select officials eligible for promotion, after comparative consideration of their merits.
The main recommendations made by the EDPS in his opinion on the promotion procedure managed by the Promotion module of Sysper 2 concern data quality, data retention and information to be given to data subjects.

Available languages: English, French
4
Oct
2007

Special allowances at the JRC - Commission

Opinion of 4 October 2007 on the notification for prior checking regarding the case "Verification of the declarations concerning special allowances at the Joint Research Centre" (Case 2007-328)
Le Centre Commun de Recherche (CCR) utilise le système d'indemnités spéciales prévu par le statut des fonctionnaires des Communautés européennes aux articles 56, 56 bis, 56 ter, 56 quater. Afin de contrôler les attributions de ces indemnités, le CCR a mis en place un système de vérification des déclarations des personnes concernées par les indemnités spéciales. Si le CEPD est globalement satisfait du traitement proposé, il a émis deux recommandations à propos de l'information des personnes concernées. Il a demandé que la finalité concernant la vérification des déclarations des indemnités spéciales et la base juridique du traitement soient clairement indiquées dans la déclaration de confidentialité.

Available languages: English, French