Print

Privacy in the EU Institutions

Regulation (EU) 2018/1725 lays down the data protection obligations for the EU institutions, bodies and agencies when they process personal data and develop new policies. This regulation also defines the obligations of the EDPS, including his role as an independent supervisory authority of EU institutions and bodies when they process personal data, and to advise on policies and legislation which affect privacy and cooperate with similar authorities to ensure consistent data protection.

 

 

 

Filters

16
Jul
2007

Early Warning System EWS - Parliament

Opinion of 16 July 2007 on the notification for prior checking regarding the "Early Warning System (EWS)" dossier (Case 2007-147)

The Early Warning System (EWS) mainly circulates confidential information on third parties (natural or legal persons) among the various departments of the Parliament. That information concerns beneficiaries of Community funds who have committed fraud, administrative errors or irregularities and also beneficiaries that threaten the financial interests of the European Community. The information may also concern natural persons with powers of representation, action or supervision over legal persons.
 
The EWS was the subject of a very detailed Commission Decision. Some of the institutions have done no more than exchange information using the Commission's EWS database. The European Parliament's services, though, decided to draw on the Commission's Decision in creating a system of their own, which is currently being set up. Some warnings established by the Commission are simply provided for by the Parliament. The EDPS has already issued a number of opinions concerning the EWS: on the Commission's EWS, an opinion on the proposed revision of the FR and its implementing rules, and finally an opinion on the use of the Commission's EWS database by the Court of Justice.

The main recommendations made by the EDPS in his opinion on the Parliament's EWS concern data quality, the setting up of personal files for all persons with whom the Parliament has contractual relationships, so that data on them can be kept up to date, rights of access and rectification, and informing the data subjects.

Available languages: English, French
11
Jul
2007

Monitoring cases - OLAF

Opinion of 11 July 2007 on a notification for prior checking on monitoring cases (Case 2006-548)

OLAF engages in processing of personal data when it opens a Monitoring case. These are cases where OLAF would be competent to conduct an external investigation, but where a Member State or other authority is in a better position to do so.  OLAF main action in such cases consists in monitoring the activities of the national authorities or EU institutions that are responsible for a case in order to ensure that the appropriate judicial or administrative actions are taken to protect the Community's financial interests.  The type of personal information processed by OLAF in these cases includes identification, professional data and information concerning activities related to matters which are the subject of monitoring.  
 

The EDPS has issued an opinion on the processing of personal data in the context of OLAF's Monitoring cases. The Opinion concludes that on a general basis the data processing complies with the principles established in the data protection Regulation. However the EDPS did make some recommendations. Among others, the EDPS asked OLAF to ensure that individuals whose data are processed by OLAF are informed of the data processing that takes place in the context of Monitoring cases. It also suggested some amendments to the privacy statement and asked OLAF to conduct a preliminary evaluation of the necessity of the 20 years conservation period vis-à-vis the purpose of such conservation.

Available languages: English, French