Letter of 9 January 2014 on the notification for prior-checking on the processing operation concerning "Individual vs. Peer rewards for increasing children's physical activity: A school based study" carried out by the JRC Institute for Health and Consumer Protection (IHCP)(Case 2013-1229)
Opinion of 26 May 2008 on a notification for prior checking on assignment of ALER flats to statutory staff of JRC Ispra and the European School in Varese (Case 2008-144)
The purpose of processing is to attribute free ALER flat to statutory staff of JRC Ispra site and the dependants of the European School in Varese taking into consideration new arrivals, family size and social aspects (such as a family with a handicap person in charge).
The attribution procedure is the following:
Opinion of 29 April 2009 on a notification for prior checking on Voice Logging at the Joint Research Centre Institute for Energy (JRC-IE) in Petten (Case 2008-014)
This case concerned the recording of incoming and outgoing calls as well as records the calling telephone number, the called telephone number, date, time and length of the conversation at the JRC-IE in Petten the purpose of being able to check the content of the calls to the lines concerned in the event of an operational incident, emergencies and to be able to evaluate emergency training exercises at a later stage. These calls may also furnish evidence for investigations into potential threats to the institution.
The EDPS opinion particularly examines the lawfulness of the processing operation as the recording of calls is a violation to the principle of confidentiality of communications. The EDPS acknowledged that the processing was lawful as based on mandatory national legislation applicable in the field of nuclear facilities. The EDPS also made recommendations on the information to the persons concerned notably to external persons calling the switchboard and who must be informed that the communication will be recorded for security purposes at the start of the call.
Opinion of 20 May 2009 on the notification for prior checking regarding the management of safety at work at the Joint Research Centre's Institute for Health and Consumer Protection in Ispra (Case 2008-541)
The Notification and the EDPS Opinion concern a dedicated filing system: "Management of Safety at Work" used by the Institute. Personal data with an implication for safety at work are collected and stored in this filing system and consulted when needed. The purpose of the processing is to comply with the employer's obligations on safety at work under Italian laws. The processing operation covers all employees of the Institute.
With regard to data quality and proportionality, the EDPS recommended that the Institute should reconsider whether the safety officer indeed needs direct access to general training data in SYSLOG Formation, as well as training data on languages and e-learning, in addition to training information directly relevant to safety at work. On rights of access, the EDPS recommended that the Institution should establish a minimum set of safeguards to ensure that access requests will be addressed in a timely manner and without restraints. With regard to information to data subjects, the EDPS recommended that notice with respect to certain items under Articles 11 and 12 of the Regulation should be provided in a more specific manner.
Opinion of 9 March 2011 on a notification for Prior Checking regarding the Management of Recruitment Files for Temporary Agents at the Joint Research Centre (JRC) (Case 2008-0143)
The notification concerns the selection and recruitment of JRC's temporary agent staff referred to in Title II of the Conditions of Employment of other servants of the European Communities. The main purpose of the processing is the constitution and management of Temporary Agent recruitment files by Management Support Units of each of the Institutes/Directorates of the JRC. They collect and further process information about potential candidates to temporary positions for the purposes of selecting the most suitable candidates. The EDPS concludes that on a general basis the procedure complies with the principles established in the data protection regulation. However the EDPS did make a number of recommendations mainly as concerns data quality, data retention period transfer of data, rights of access and rectification, information of the data subject.
Opinion of 9 June 2008 on a notification for prior checking regarding the selection and management of interim staff at JRC (Case 2008-139)
Management Support Units of each of the Institutes/Directorates of the JRC that use interims collect and further process information about potential candidates to interim positions for the purposes of selecting the most suitable candidates. The EDPS Opinion suggests that JRC, among others should, (a) replace the collection of certificates of good conduct by other tools that demonstrate the prior criminal behaviour (criminal records, for example) (b) ensure that applicants have access to their evaluation data including the assessment notes concerning them drafted by the selection committee and Human Resources staff of the relevant Management Units.