Regulation (EU) 2018/1725 lays down the data protection obligations for the EU institutions, bodies and agencies when they process personal data and develop new policies. This regulation also defines the obligations of the EDPS, including his role as an independent supervisory authority of EU institutions and bodies when they process personal data, and to advise on policies and legislation which affect privacy and cooperate with similar authorities to ensure consistent data protection.
Opinion of 12 December 2008 on a notification for prior checking on the conduct of investigations by the Security Office (Case 2008-0410)
Opinion of 5 December 2008 on a notification for prior checking on trainee recruitment (Case 2008-196)
The European Centre for the Development of Vocational Training (Cedefop) put in place a processing operation to recruit trainees. The purpose of the processing operation is to recruit trainees and give them a general idea of the objectives and problems associated with the development of initial and continuing professional training within the framework of European Institutions. The EDPS made several recommandations. The Cedefop should establish a shorter conservation period for the unsuccessful applicants establish a conservation period for the copy of the traineeship certificate. The right of access and rectification to the assessment report or other administrative documents should also be ensured to the trainees and the new rules on trainees recruitment that will be adopted soon by the Cedefop should be in compliance with the Regulation 45/2001 and in particular with the recommendations made the EDPS in his Opinion.
Opinion of 5 December 2008 on the notification for prior checking on the "IRIS: Family allowances" dossier (Case 2008-439)
Opinion of 5 December 2008 on the notification for prior checking regarding data processing in the Flexitime management and checking system (Case 2008-173)
Flexitime was introduced in order to manage staff working hours more effectively and provide greater flexibility. The flexitime system is managed by the EFFICIENT database. It imports data relating to individuals, missions and absences (official leave, sick leave, etc.) from the SIC CONGES database and also from the Mission application developed by the Court of Auditors since training absences are recorded by the training department.
The proposed processing operation would not appear to involve any breach of the provisions of Regulation (EC) No 45/2001, provided that the Court of Auditors reviews access rights, the data storage period and the content of information and the manner of providing it.
Opinion of 5 December 2008 on a notification for prior checking concerning the evaluation of interpreters (Case 2008-578)