Print

Privacy in the EU Institutions

Regulation (EU) 2018/1725 lays down the data protection obligations for the EU institutions, bodies and agencies when they process personal data and develop new policies. This regulation also defines the obligations of the EDPS, including his role as an independent supervisory authority of EU institutions and bodies when they process personal data, and to advise on policies and legislation which affect privacy and cooperate with similar authorities to ensure consistent data protection.

 

 

 

Filters

6
Jun
2007

Free phone service - OLAF

Opinion of 6 June 2007 on a notification for prior checking on a free phone service (Case 2007-74)

OLAF has put this tool at the public's disposal, enabling individuals to provide information that may be useful in the fight against fraud, corruption and other illegal activities affecting the financial interests of the Community. Anyone, EU staff as well as citizens, can use the Free Phone Service to report such types of unlawful behaviour.
After listening to the voice messages and deleting those that are deemed fully improper and pointless, OLAF investigators summarise the remaining messages in a "free phone screening form". This form indicates whether or not the messages are relevant to OLAF's work or to that of other authorities, such as member states or European Commission services. Based on this assessment, OLAF will deem them irrelevant, investigate them further and potentially open an investigation, or send them to other authorities if the case is relevant for them.
The OLAF Free Phone Service is subject to prior checking as it deals with data which may relate to suspected offences, criminal convictions or security measures. In his opinion, the EDPS concluded that OLAF has substantially followed all the principles of the Regulation. Nevertheless some recommendations were made, including:
  • ensuring the deletion of voice messages with information deemed irrelevant. This should not be recorded in writing or, if so, should be deleted immediately after confirmation of their irrelevance.
  • ensuring the right to information to those who have been named by callers who use the Free Phone Service, subject to the application of the exceptions provided for in the Regulation.
  • setting up a voice recording so that, upon calling the Free Phone Service, a short version of the privacy statement is provided or, alternatively, publishing it on OLAF's website.
Available languages: English, French
6
Jun
2007

Certification procedure - Parliament

Opinion of 6 June 2007 on the notification for prior checking regarding the "certification procedure" dossier (Case 2007-168)
By Bureau Decision of 26 September 2005 the European Parliament adopted the arrangements for implementation of the certification procedure. Article 45a of the Staff Regulations of Officials of the European Communities, as amended by Regulation No 723/2004, enables officials in function group AST to be appointed to a post in function group AD on condition that, firstly, they have been selected by the institution to take part in a training programme, secondly, they have completed the training programme and, thirdly, they have passed examinations demonstrating that they have successfully taken part in the training programme.
The main recommendations made by the EDPS in the context of his opinion on the certification procedure concern the storage of data and the information supplied to data subjects.

Available languages: English, French
4
Jun
2007

Recruitment procedure - European Central Bank

Opinion of 4 June 2007 on a notification for prior checking on recruitment procedure (Case 2007-3)
Le CEPD a procédé au contrôle préalable du traitement des données à caractère personnel dans le cadre de la procédure de recrutement de la Banque centrale européenne, où un système de recrutement en ligne est mis en place. Tout candidat ayant déposé son dossier de candidature définitif devient une "personne concernée" par la protection des données à caractère personnel. Le CEPD a examiné le formulaire de candidature ainsi que la procédure de candidature en ligne, la durée de conservation des données tout comme les moyens dont les personnes concernées disposent pour exercer leurs droits ainsi que les informations qu'elles reçoivent. Les recommandations du CEPD portent essentiellement sur les informations qui doivent être communiquées aux candidats dans la déclaration de confidentialité et dans le guide du candidat, sur la conservation des actes de candidatures et autres documents et sur le contenu des contrats conclus avec les sous-traitants pour ce qui est des obligations en matière de protection des données.

Available languages: English, French