Security investigations at Ispra - Commission

Opinion of 31 July 2008 on a notification for prior checking on the Security investigations at Joint Research Centre ISPRA (Case 2007-507)
The Security Service of JRC Ispra C7 performs investigations related to security related incidents such as traffic accidents, vandalism theft, unauthorised access, etc. in the context of which personal data are processed. The outcome of the investigation is reflected in a report describing the occurrence. This prior check analyses whether this data processing is in line with Regulation (EC) No 45/2001. The Opinion concludes by giving some recommendations to data controller towards ensuring full compliance with Regulation (EC) No 45/2001. Among others, the EDPS suggests amending the privacy statement and setting up a procedure to give the privacy statement directly to individuals, confirming the competences of the Security Service of JRC to perform investigations, etc.