Print

Privacy in the EU Institutions

Regulation (EU) 2018/1725 lays down the data protection obligations for the EU institutions, bodies and agencies when they process personal data and develop new policies. This regulation also defines the obligations of the EDPS, including his role as an independent supervisory authority of EU institutions and bodies when they process personal data, and to advise on policies and legislation which affect privacy and cooperate with similar authorities to ensure consistent data protection.

 

 

 

Filters

9
Feb
2009

ART: Audit Reconciliation Tool - Court of Auditors

Opinion of 9 February 2009 on a notification for prior checking regarding "ART: Audit Reconciliation Tool" (Case 2008-239)

The purpose of the processing operation is to facilitate individual auditors and their Heads of Unit to reconcile their time recorded in ASSYST (the Audit Management System) with EFFICIENT (the Flexitime system) through the so called ART tool.

A reconciliation of the records of ASSYST and EFFICIENT by staff allows them ensuring that their ASSYST records are complete and accurate for the current and the previous month.

The main recommendations of the EDPS related to, among others, the need to adopt a specific legal basis for the ART processing operation, the adoption of a privacy statement and the modification of the privacy statements of the two underlying databases.

Available languages: English, French
26
Jan
2009

Threats to European Commission interests in the areas of counter-intelligence and counter-terrorism - Commission

Opinion of 26 January 2009 on a notification for prior checking concerning "Threats to European Commission interests in the areas of counter-intelligence and counter-terrorism" (Case 2008-0440)
In the context of threat management in the areas of counter-espionage and counter-terrorism, the European Commission has set up the two separate procedures of security investigations and screening procedures in order to protect its interests and those of the Member States. The EDPS has examined the two procedures and issued recommendations including the following: establishment of a more detailed legal basis covering a broader scope spanning all the possibilities for launching a screening procedure and establishment of a procedure ensuring that data are stored no longer than necessary.  The EDPS also recommended revising the screening section of the privacy statement and pro-actively supplying data subjects of screening with the privacy statement.

Available languages: English, French