Third language - EMCDDA

Opinion of 20 May 2008 on a notification for prior checking on the evaluation of staff's capacity to work in a third language (Case 2008-159)
EMCDDA is engaged in the processing of personal data of its staff for the purposes of evaluating their capacity to work in a third language in the context of the application of Article 45.2 of the Staff Regulations.

The EDPS prior check suggests that EMCDDA carries out various measures to ensure the full implementation of Regulation (EC) No 45/2001, including

• Anonymising the data that will be used for statistical purposes during the first year of storage.
• Ensuring that a contract is signed between EMCDDA and the contractor that organises language courses pursuant to which the contractor undertakes, among others, to adopt appropriate technical and organisational security measures to protect the personal data received from EMCDDA.
• Ensure that staff concerned have access to the data held by the contractor, mainly the results of the language tests.
• Amend the privacy policy.