Privacy in the EU Institutions

Opinion of 17 September 2008 on a notification for prior checking regarding the "Career Mobility" (Case 2008-329)
This prior checking concerns the data processing operations that take place in the context of the processing for career mobility purposes at the European Parliament. The processing is carried out by the Internal Organisation Unit of the DG for Personnel as well as by the Career Counselling and Professional Guidance Service. The Opinion recommends the data controller to implement various data protection safeguards towards ensuring full compliance with Regulation (EC) No 45/2001. Among others, the EDPS suggests setting up storage periods, ensuring that individuals have the right of access to their data and amending the information notice.

Opinion of 16 September 2008 on the notification for prior checking regarding the partial subconctracting of the Bank's health insurance scheme (Case 2008-323)

Opinion of 16 September 2008 on the notification for prior checking regarding the "Flexitime interface-PersonaGrata (DGA3) dossier (Case 2008-324)

This prior check by the European Data Protection Supervisor is the first to be based on Article 27(2)(c), which provides for the prior checking of "processing operations allowing linkages not provided for pursuant to national or Community legislation between data processed for different purposes". The purpose of the interface between Flexitime and PersonaGrata at the Council is to make it possible to prevent duplication of the work of encoding data considered as equivalent between the two databases with the dangers of error that that entails, and thus to ensure consistency between the two databases, improve the efficiency of personnel management in the departments and units and to provide more reliable information. As regards the clocking data, the purpose of the interface is to export those data from the Flexitime database to the PersonaGrata system.

The EDPS' main recommendations for the interface between Flexitime and PersonaGrata concern compliance with the rules laid down for the Flexitime case (including those on the provision of information to data subjects and the data storage period), to maintain consistency between these two cases. The EDPS also asks that there should be a specific procedure for saving data in connection with that interface.

Avis du 16 septembre 2008 sur la notification d'un contrôle préalable sur l'accréditation du personnel des firmes externes participant aux réunions du Conseil européen (Dossier 2007-046)

Avis du 16 septembre 2008 sur la notification d'un contrôle préalable sur l'accréditation de journalistes participant aux réunions du Conseil européen (Dossier 2004-259)