Disziplinarverfahren und interne Ermittlungen

Opinion of 7 April 2008 on a notification for prior checking on coordination cases (Case 2007-699)
OLAF engages in processing of personal data when it opens a Coordination case. These are cases that could be the subject of OLAF external investigations, but where OLAF’s role is to contribute to investigations being carried out by other national or Community services by, among other things, facilitating the gathering and exchange of information and ensuring operational synergy among the relevant national and Community services. The main investigative input is provided by other authorities. OLAF's role includes facilitating contacts and encouraging the responsible authorities to work together. The type of personal information processed by OLAF in these cases includes identification, professional data and information concerning activities related to matters which are the subject of coordination.

The EDPS has issued an opinion on the processing of personal data in the context of OLAF's Coordination cases. The Opinion concludes that on a general basis the data processing complies with the principles established in the data protection Regulation. However the EDPS did make some recommendations. Among others, the EDPS asked OLAF to ensure that individuals whose data are processed by OLAF are informed of the data processing that takes place in the context of Coordination cases. It also suggested some amendments to the privacy statement and asked OLAF to conduct a preliminary evaluation of the necessity of the 20 years conservation period vis-à-vis the purpose of such conservation.

Opinion of 13 February 2008 on a notification for prior checking on the data processing carried out in the framework of administrative enquiries and disciplinary proceedings (Case 2007-582)

Letter to the President of the College of Chiefs of Administration relating to administrative inquiries and disciplinary proceedings (Case 2006-75)

Opinion of 18 December 2007 on a notification for prior checking on the fraud notification service (Case 2007-481)

• ensuring the deletion of pointless messages as well as avoiding asking questions that would lead informants to disclose information that is irrelevant for the purposes of detecting fraud and corruption affecting the financial interests of the Community.
• ensuring the right to information, access and rectification to those who have been named by the users of the Fraud Notification Service, subject to the application of the exceptions provided for in the Regulation.
• ensuring that the conservation period of irrelevant information is kept as short as possible and in any event for no longer than one year.
• inserting a link in the privacy policy at the webpage through which visitors who want to use the Fraud Notification Service must necessarily go through or alternatively in a very prominent way, immediately after or before the information on the Fraud Notification Service.

Opinion of 20 November 2007 on a notification for prior checking on "Council Regulation (EC) 1469/95" (Case 2007-215)